Skip to content

Commit 1deb0ce

Browse files
Strehkclaude
andcommitted
fix(security): Ignore Go stdlib CVEs in oven/bun base image
Add CVE-2025-68121 (crypto/tls session resumption) and CVE-2025-61730 (TLS 1.3 handshake) to .trivyignore. These are Go stdlib vulnerabilities in the oven/bun Docker base image and are not exploitable in this Node.js/Bun application. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 16b0e23 commit 1deb0ce

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.trivyignore

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,3 +16,5 @@ CVE-2025-68973
1616
# Go stdlib vulnerabilities from oven/bun base image - not exploitable in Node.js/Bun app
1717
CVE-2025-61726
1818
CVE-2025-61728
19+
CVE-2025-68121
20+
CVE-2025-61730

0 commit comments

Comments
 (0)