Ignore pyasn1 CVE in pip-audit until python-jose supports pyasn1 0.6+.
All checks were successful
Docker Image bauen & veröffentlichen / build-and-push (push) Successful in 1m9s

python-jose 3.4.0 still pins pyasn1<0.5.0, so this transitive finding has no practical fix path yet.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
smueller
2026-07-09 12:49:02 +02:00
parent 070e99303a
commit 555fd2c6ba

View File

@@ -44,7 +44,8 @@ jobs:
--ignore-vuln PYSEC-2026-1942 \
--ignore-vuln PYSEC-2026-1941 \
--ignore-vuln CVE-2026-48818 \
--ignore-vuln CVE-2026-48817
--ignore-vuln CVE-2026-48817 \
--ignore-vuln CVE-2026-30922
- name: Docker Buildx einrichten
uses: docker/setup-buildx-action@v3