Add CVE-2025-60876 to security allowlist - BusyBox wget vulnerability with no fix available

This commit is contained in:
Alexsander Hamir 2026-01-01 14:03:30 -08:00
parent 2add968cc8
commit feda494bea

View file

@ -128,6 +128,7 @@ run_grype_scans() {
"GHSA-5j98-mcp5-4vw2"
"CVE-2025-13836" # Python 3.13 HTTP response reading OOM/DoS - no fix available in base image
"CVE-2025-12084" # Python 3.13 xml.dom.minidom quadratic algorithm - no fix available in base image
"CVE-2025-60876" # BusyBox wget HTTP request splitting - no fix available in Chainguard Wolfi base image
)
# Build JSON array of allowlisted CVE IDs for jq