From a8dee8f0cde5b584772db83a760e2c3a360c2400 Mon Sep 17 00:00:00 2001 From: Kovid Goyal Date: Fri, 21 Aug 2026 10:53:01 +0530 Subject: [PATCH] Ignore CVE for openssl with a fix that has not yet been released --- .github/workflows/ci.py | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/ci.py b/.github/workflows/ci.py index 6a1c6e97a..9d4126654 100644 --- a/.github/workflows/ci.py +++ b/.github/workflows/ci.py @@ -289,6 +289,7 @@ IGNORED_DEPENDENCY_CVES = [ # github.com/nwaples/rardecode/v2 'CVE-2025-11579', # rardecode is version 2.2.1, not vulnerable 'CVE-2026-2673', # openssl fix not released + 'CVE-2026-14456', # openssl fix not released ]