From feda494bea9aa41ed3585e8bced443e0c77e8fb1 Mon Sep 17 00:00:00 2001
From: Alexsander Hamir <alexsanderhamirgomesbaptista@gmail.com>
Date: Thu, 1 Jan 2026 14:03:30 -0800
Subject: [PATCH] Add CVE-2025-60876 to security allowlist - BusyBox wget
 vulnerability with no fix available

---
 ci_cd/security_scans.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ci_cd/security_scans.sh b/ci_cd/security_scans.sh
index db7d268d33b..5242f980f9c 100755
--- a/ci_cd/security_scans.sh
+++ b/ci_cd/security_scans.sh
@@ -128,6 +128,7 @@ run_grype_scans() {
         "GHSA-5j98-mcp5-4vw2"
         "CVE-2025-13836" # Python 3.13 HTTP response reading OOM/DoS - no fix available in base image
         "CVE-2025-12084" # Python 3.13 xml.dom.minidom quadratic algorithm - no fix available in base image
+        "CVE-2025-60876" # BusyBox wget HTTP request splitting - no fix available in Chainguard Wolfi base image
     )
 
     # Build JSON array of allowlisted CVE IDs for jq