diff --git a/.trivyignore b/.trivyignore index 1ef9b557f..10b5fdf25 100644 --- a/.trivyignore +++ b/.trivyignore @@ -10,4 +10,8 @@ CVE-2025-68973 exp:2026-06-15 # gnutls DoS vulnerability via crafted ClientHello - not impactful as gnutls is not used by our Java service # See: UID2-6655 -CVE-2026-1584 exp:2026-08-27 \ No newline at end of file +CVE-2026-1584 exp:2026-08-27 + +# jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API +# See: UID2-6670 +GHSA-72hv-8253-57qq exp:2026-09-01 \ No newline at end of file