From 94e15a92b29705be0ab65d4e44478872036a0ac0 Mon Sep 17 00:00:00 2001 From: Yuta Saito Date: Fri, 16 Jan 2026 11:41:54 +0900 Subject: [PATCH] chore: add zlib to allow list --- ci_cd/security_scans.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/ci_cd/security_scans.sh b/ci_cd/security_scans.sh index 17cf4c1817d..ff81153b505 100755 --- a/ci_cd/security_scans.sh +++ b/ci_cd/security_scans.sh @@ -134,6 +134,7 @@ run_grype_scans() { "CVE-2019-1010023" # glibc ldd remap issue - awaiting patched Wolfi glibc build "CVE-2019-1010024" # glibc ASLR mitigation bypass - awaiting patched Wolfi glibc build "CVE-2019-1010025" # glibc pthread heap address leak - awaiting patched Wolfi glibc build + "CVE-2026-22184" # zlib untgz buffer overflow - untgz unused + no fixed Wolfi build yet ) # Build JSON array of allowlisted CVE IDs for jq