diff --git a/.grype.yaml b/.grype.yaml index 40200e9..c25ca9a 100644 --- a/.grype.yaml +++ b/.grype.yaml @@ -37,3 +37,12 @@ ignore: # [bookworm] - raptor2 (Minor issue, revisit when fixed upstream) # - vulnerability: CVE-2024-57823 + # CVE-2025-0665 + # ============== + # + # Debian tracker: https://security-tracker.debian.org/tracker/CVE-2025-0665 + # Verdict: Dangerzone is not affected because the vulnerable code is not + # present in Debian Bookworm. Also, libcurl is an HTTP client, and the + # Dangerzone container does not make any network calls. + - vulnerability: CVE-2025-0665 +