diff --git a/.trivyignore b/.trivyignore index 4ade79f..91d9d1c 100644 --- a/.trivyignore +++ b/.trivyignore @@ -1,12 +1,6 @@ -# pebble, false positive https://github.com/canonical/pebble/issues/498 -CVE-2024-34156 # Vulnerability in golang.org/x/crypto introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod CVE-2024-45337 CVE-2025-22869 -# Vulnerability in golang.org/x/net introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod -CVE-2024-45338 -# Vulnerability in crypto/x509 introduced by statsd-exporter. We have to wait until it is fixed upstream: https://github.com/prometheus/statsd_exporter/blob/master/go.mod -CVE-2025-22874 # Vulnerability in golang.org/x/oauth2/jws introduced by statsd-exporter. CVE-2025-22868 # Vulnerability in go stdlib introduced by statsd-exporter. diff --git a/requirements.txt b/requirements.txt index ca7bc07..162f328 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,5 +1,5 @@ Flask==3.1.2 -pydantic==2.12.1 +pydantic==2.12.2 kombu==5.5.4 pymongo==4.15.3 PyYAML==6.0.*