diff --git a/audit-ci.jsonc b/audit-ci.jsonc
index 28ac9d5..f391fc3 100644
--- a/audit-ci.jsonc
+++ b/audit-ci.jsonc
@@ -4,7 +4,6 @@
   // Only use one of ["low": true, "moderate": true, "high": true, "critical": true]
   "moderate": true,
   "allowlist": [ // NOTE: Please add as much information as possible to any items added to the allowList
-    "GHSA-38c4-r59v-3vqw",
-    "GHSA-2g4f-4pwh-qvx6" // ajv ReDoS with $data option - transitive via eslint, unfixable without eslint 10.x
+    "GHSA-2g4f-4pwh-qvx6" // ajv ReDoS - transitive via eslint 9's @eslint/eslintrc (uses ajv 6.x API, override to 8.x crashes eslint)
   ]
 }