From 91a143b67aa66cb55130a6a65dea2faa892b2ee8 Mon Sep 17 00:00:00 2001 From: Michael Milton Date: Thu, 21 Aug 2025 14:55:28 -0400 Subject: [PATCH] Suppressing non-impactful vulnerability warning from CVE (#5995) * Suppressing non-impactful vulnerability warning from CVE --- .release/security-scan.hcl | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl index 352883d976..d2a8b6bd20 100644 --- a/.release/security-scan.hcl +++ b/.release/security-scan.hcl @@ -14,7 +14,7 @@ container { # busybox@1.37.0-r12 https://nvd.nist.gov/vuln/detail/CVE-2025-46394 # # Boundary does not shell out to the busybox tar program. - "CVE-2025-46394", + "CVE-2025-46394", # busybox@1.37.0-r12 https://nvd.nist.gov/vuln/detail/CVE-2024-58251 # @@ -29,7 +29,12 @@ container { # iputils@20240905-r0 https://nvd.nist.gov/vuln/detail/CVE-2025-47268 # # Boundary does not utilize ping in iputils. - "CVE-2025-47268" + "CVE-2025-47268", + + # iputils@20240905-r0 https://nvd.nist.gov/vuln/detail/CVE-2025-48964 + # + # Boundary does not utilize ping in iputils. + "CVE-2025-48964" ] } }