From a9d02f69042e0903fb1ea8d07df6b9093a4404a6 Mon Sep 17 00:00:00 2001 From: sophia chen Date: Wed, 28 Oct 2026 14:24:48 +1100 Subject: [PATCH 1/2] UID2-8213: suppress CVE-2026-102554 in .trivyignore (not affected) Co-Authored-By: Claude Sonnet 5.5 --- .trivyignore | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.trivyignore b/.trivyignore index 43599b99..01d3552f 100644 --- a/.trivyignore +++ b/.trivyignore @@ -66,3 +66,7 @@ CVE-2026-93990 exp:2026-12-25 # CVE-2026-77214 — libexpat (HIGH). Not vulnerable. # See: UID2-8106 CVE-2026-77214 exp:2027-01-19 + +# CVE-2026-102554 — guava (HIGH). Not vulnerable. +# See: UID2-8213 +CVE-2026-102554 From 440a7ddc3c0e235fd77206821c35e3b8e70bcf97 Mon Sep 17 00:00:00 2001 From: sophia chen Date: Wed, 28 Oct 2026 16:15:56 +1100 Subject: [PATCH 2/2] UID2-8213, UID2-8214: suppress 3 CVEs in .trivyignore (not affected) Co-Authored-By: Claude Sonnet 5.5 --- .trivyignore | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/.trivyignore b/.trivyignore index 01d3552f..07e7ca35 100644 --- a/.trivyignore +++ b/.trivyignore @@ -70,3 +70,11 @@ CVE-2026-77214 exp:2027-01-19 # CVE-2026-102554 — guava (HIGH). Not vulnerable. # See: UID2-8213 CVE-2026-102554 + +# CVE-2026-8763 — bcprov-jdk18on (CRITICAL). Not vulnerable. +# See: UID2-8214 +CVE-2026-8763 exp:2027-04-28 + +# CVE-2026-13506 — bcprov-jdk18on (HIGH). Not vulnerable. +# See: UID2-8214 +CVE-2026-13506 exp:2027-04-28