From 39181582032ef1437ac0fce994978fb705b735cf Mon Sep 17 00:00:00 2001 From: scott sundahl Date: Tue, 3 Feb 2026 14:28:00 -0700 Subject: [PATCH 1/5] remove ignored vulnerability GHSA-m5qc-5hw7-8vg7 --- .trivyignore | 3 --- package.json | 1 - 2 files changed, 4 deletions(-) diff --git a/.trivyignore b/.trivyignore index 9dec55d74..ab39d72a3 100644 --- a/.trivyignore +++ b/.trivyignore @@ -4,9 +4,6 @@ # e.g. # CVE-2022-3996 -# UID2-5271 -GHSA-m5qc-5hw7-8vg7 exp:2025-06-04 - # UID2-5394 GHSA-f46r-rw29-r322 exp:2025-05-12 diff --git a/package.json b/package.json index 8bfd1e1d3..2f1d96dbc 100644 --- a/package.json +++ b/package.json @@ -50,7 +50,6 @@ "typescript": "^5.6.3" }, "overrides": { - "image-size@1": "1.2.1", "body-parser@1": "1.20.3", "path-to-regexp@0": "0.1.12", "path-to-regexp@1": "1.9.0", From 759678d1a5ed24826b850ea961ce29bf2e9f7384 Mon Sep 17 00:00:00 2001 From: scott sundahl Date: Tue, 3 Feb 2026 14:33:55 -0700 Subject: [PATCH 2/5] remove ignored vulnerability GHSA-f46r-rw29-r322 --- .trivyignore | 3 --- 1 file changed, 3 deletions(-) diff --git a/.trivyignore b/.trivyignore index ab39d72a3..e83df0867 100644 --- a/.trivyignore +++ b/.trivyignore @@ -4,9 +4,6 @@ # e.g. # CVE-2022-3996 -# UID2-5394 -GHSA-f46r-rw29-r322 exp:2025-05-12 - # UID2-5395 GHSA-cpj6-fhp6-mr6j exp:2025-05-12 From 053bfd41f13a09f74d1b21f8dff88b61e3b7d3a1 Mon Sep 17 00:00:00 2001 From: scott sundahl Date: Tue, 3 Feb 2026 14:40:08 -0700 Subject: [PATCH 3/5] remove ignored vulnerability GHSA-cpj6-fhp6-mr6j --- .trivyignore | 3 --- 1 file changed, 3 deletions(-) diff --git a/.trivyignore b/.trivyignore index e83df0867..cc0a202ba 100644 --- a/.trivyignore +++ b/.trivyignore @@ -4,9 +4,6 @@ # e.g. # CVE-2022-3996 -# UID2-5395 -GHSA-cpj6-fhp6-mr6j exp:2025-05-12 - # UID2-6385 CVE-2025-66418 exp:2026-06-15 CVE-2025-66471 exp:2026-06-15 \ No newline at end of file From 21199037baad29011c5ee63d09e15c233da475d0 Mon Sep 17 00:00:00 2001 From: scott sundahl Date: Tue, 3 Feb 2026 14:45:53 -0700 Subject: [PATCH 4/5] remove ignored vulnerability CVE-2025-66418 --- .trivyignore | 1 - 1 file changed, 1 deletion(-) diff --git a/.trivyignore b/.trivyignore index cc0a202ba..1648fa7cb 100644 --- a/.trivyignore +++ b/.trivyignore @@ -5,5 +5,4 @@ # CVE-2022-3996 # UID2-6385 -CVE-2025-66418 exp:2026-06-15 CVE-2025-66471 exp:2026-06-15 \ No newline at end of file From 9ffe9ec19ac023d439327659ed226b6dcf274bf9 Mon Sep 17 00:00:00 2001 From: scott sundahl Date: Tue, 3 Feb 2026 14:51:04 -0700 Subject: [PATCH 5/5] remove ignored vulnerability CVE-2025-66471 --- .trivyignore | 3 --- 1 file changed, 3 deletions(-) diff --git a/.trivyignore b/.trivyignore index 1648fa7cb..3aa85f54a 100644 --- a/.trivyignore +++ b/.trivyignore @@ -3,6 +3,3 @@ # for more details # e.g. # CVE-2022-3996 - -# UID2-6385 -CVE-2025-66471 exp:2026-06-15 \ No newline at end of file