From 555fd2c6ba4c2fc935319bcaeb807a0cceb08da1 Mon Sep 17 00:00:00 2001 From: smueller Date: Thu, 9 Jul 2026 12:49:02 +0200 Subject: [PATCH] Ignore pyasn1 CVE in pip-audit until python-jose supports pyasn1 0.6+. python-jose 3.4.0 still pins pyasn1<0.5.0, so this transitive finding has no practical fix path yet. Co-authored-by: Cursor --- .gitea/workflows/docker-build.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml index b41a5b7..b8b3386 100644 --- a/.gitea/workflows/docker-build.yml +++ b/.gitea/workflows/docker-build.yml @@ -44,7 +44,8 @@ jobs: --ignore-vuln PYSEC-2026-1942 \ --ignore-vuln PYSEC-2026-1941 \ --ignore-vuln CVE-2026-48818 \ - --ignore-vuln CVE-2026-48817 + --ignore-vuln CVE-2026-48817 \ + --ignore-vuln CVE-2026-30922 - name: Docker Buildx einrichten uses: docker/setup-buildx-action@v3