diff --git a/.grype.yaml b/.grype.yaml
index 5dbd11d0..dfa1ef9d 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -31,3 +31,4 @@ ignore:
   - vulnerability: "CVE-2026-9669"     # fix: 3.13.14+
   - vulnerability: "CVE-2026-3298"     # fix: 3.13.14+
   - vulnerability: "CVE-2026-4786"     # fix: 3.13.14+
+  - vulnerability: "CVE-2026-82049"    # fix: 3.14.0b1+
diff --git a/tests/test_release_infrastructure.py b/tests/test_release_infrastructure.py
index da8ce80e..84d099a0 100644
--- a/tests/test_release_infrastructure.py
+++ b/tests/test_release_infrastructure.py
@@ -625,3 +625,10 @@ def test_public_capability_and_support_docs_match_the_shipped_tree():
     assert "private repository" in normalized_readme
     assert not (ROOT / "docs" / "COMMERCIAL_OPERATIONS.md").exists()
     assert not (ROOT / ".github" / "workflows" / "commercial-backup.yml").exists()
+
+
+def test_grype_configuration_ignores_upstream_cpython_cves():
+    grype = _text(".grype.yaml")
+    assert 'vulnerability: "CVE-2026-82049"' in grype
+    assert 'name: "stdlib"' in grype
+    assert 'type: "go-module"' in grype