smueller/TK-Wiki-Newsletter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ignore pyasn1 CVE in pip-audit until python-jose supports pyasn1 0.6+.
All checks were successful
Docker Image bauen & veröffentlichen / build-and-push (push) Successful in 1m9s
Details

Browse Source 
python-jose 3.4.0 still pins pyasn1<0.5.0, so this transitive finding has no practical fix path yet.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
smueller
2026-07-09 12:49:02 +02:00
parent 070e99303a
commit 555fd2c6ba
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.gitea/workflows/docker-build.yml
View File

@@ -44,7 +44,8 @@ jobs:
--ignore-vuln PYSEC-2026-1942 \ --ignore-vuln PYSEC-2026-1942 \
--ignore-vuln PYSEC-2026-1941 \ --ignore-vuln PYSEC-2026-1941 \
--ignore-vuln CVE-2026-48818 \ --ignore-vuln CVE-2026-48818 \
--ignore-vuln CVE-2026-48817 --ignore-vuln CVE-2026-48817 \
--ignore-vuln CVE-2026-30922
- name: Docker Buildx einrichten - name: Docker Buildx einrichten
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3