From 63b93e8108f28a47e8b577a5bf8387ba62daf005 Mon Sep 17 00:00:00 2001 From: sophia chen Date: Mon, 26 Oct 2026 14:15:18 +1100 Subject: [PATCH 1/2] UID2-8173: suppress CVE-2026-111497 in .trivyignore (not affected) Co-Authored-By: Claude Sonnet 5.5 (cherry picked from commit 459189a245ced3d43e6c97400cb7eaf695c52088) --- .trivyignore | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.trivyignore b/.trivyignore index c7f4b50c2..4b8c0c0a7 100644 --- a/.trivyignore +++ b/.trivyignore @@ -32,3 +32,7 @@ CVE-2026-40984 exp:2026-11-11 # CVE-2026-77214 — libexpat (HIGH). Not vulnerable. # See: UID2-8106 CVE-2026-77214 exp:2027-01-19 + +# CVE-2026-111497 — brotli-libs (HIGH). Not vulnerable. +# See: UID2-8173 +CVE-2026-111497 exp:2027-04-26 From e7463ddbe3e68231075b94e4aebb864c4c5d180e Mon Sep 17 00:00:00 2001 From: sophia chen Date: Mon, 26 Oct 2026 15:37:00 +1100 Subject: [PATCH 2/2] UID2-8178: upgrade urllib3 to 2.8.0 (CVE-2026-97687, CVE-2026-97689) Co-Authored-By: Claude Opus 5.5 (cherry picked from commit 6a8de80c722c726fe2e1fa2589f939ce351930dd) --- scripts/aws/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/aws/requirements.txt b/scripts/aws/requirements.txt index 786e2fc9a..df252a26d 100644 --- a/scripts/aws/requirements.txt +++ b/scripts/aws/requirements.txt @@ -1,4 +1,4 @@ requests[socks]==2.32.3 boto3==1.35.59 -urllib3==2.7.0 +urllib3==2.8.0 PyYAML===6.0.2 \ No newline at end of file