Skip to content

Commit beb9ace

Browse files
UID2-7008: Suppress CVE-2026-33845 in .trivyignore — gnutls not used by our service (#2516)
1 parent b9eeb5b commit beb9ace

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

.trivyignore

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ CVE-2025-68973 exp:2026-06-15
1111
# gnutls DoS vulnerability via crafted ClientHello - not impactful as gnutls is not used by our Java service
1212
# See: UID2-6655
1313
CVE-2026-1584 exp:2026-08-27
14+
# gnutls DoS vulnerability via DTLS zero-length record - not impactful as gnutls is not used by our Java service
15+
# See: UID2-7008
16+
CVE-2026-33845 exp:2026-11-04
1417

1518
# jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API
1619
# See: UID2-6670

0 commit comments

Comments
 (0)