From c976a4a757ff55ea3d55715ce2abd73d4510e1ac Mon Sep 17 00:00:00 2001
From: Matt Collins <matt.collins@thetradedesk.com>
Date: Wed, 4 Nov 2026 04:33:39 +0000
Subject: [PATCH] UID2-8254, UID2-8255: suppress 2 CVEs in .trivyignore

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 .trivyignore | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.trivyignore b/.trivyignore
index a639186..4c8f475 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -47,3 +47,11 @@ CVE-2026-92392 exp:2027-04-28
 # CVE-2026-116689 — follow-redirects (HIGH). Not vulnerable.
 # See: UID2-8239
 CVE-2026-116689 exp:2027-05-02
+
+# CVE-2026-117610 — libexpat (HIGH). Not vulnerable.
+# See: UID2-8254
+CVE-2026-117610 exp:2027-11-04
+
+# CVE-2026-118370 — libexpat (HIGH). Not vulnerable.
+# See: UID2-8255
+CVE-2026-118370 exp:2027-11-04