# CVEs that pip-audit reports but which we have explicitly accepted as
# risk-managed. Each entry must include a justification and a tracking link.
# Remove an entry once the upstream cause is resolved and a fresh
# `uv lock --upgrade` no longer reports it.
#
# Format: one vulnerability ID per line, using a pip-audit-supported prefix
# such as CVE-, GHSA-, or PYSEC-. Lines starting with `#` and blank lines are
# ignored. Inline `#` comments after the ID are allowed and encouraged.
#
# To re-verify this list, run `uv run pip-audit` with no ignore flags and
# compare the reported IDs against the entries below. Anything listed here
# that pip-audit no longer reports is stale and should be deleted.

# --- Blocked by zenml's `click<=8.2.1` cap. --------------------------------
# zenml declares `click>=8.0.1,<=8.2.1`. The ceiling is inclusive and sits on
# the vulnerable version itself, so no lockfile refresh can reach the 8.3.3
# fix while we depend on zenml.
#
# Not exploitable here: the advisory is a command injection in `click.edit()`,
# the helper that shells out to `$EDITOR`. Kitaru never calls it (our only
# click usage is `click.get_app_dir()` and catching `click.ClickException`),
# and neither does zenml. The CVSS vector is local-only and already requires
# high privileges (AV:L/AC:H/PR:H/UI:R).
# Tracked upstream: https://github.com/zenml-io/zenml/issues/5077
PYSEC-2026-2132  # click 8.2.1 -> 8.3.3 (CVE-2026-7246, `click.edit()` injection)

# --- Blocked by the fastapi pin in zenml's [server] extra. -----------------
# zenml pins `fastapi>=0.120.1,<0.121.0`, and fastapi 0.120.x in turn requires
# `starlette<0.50.0`. The fixes below all land in starlette 1.x, so they are
# unreachable until zenml widens its server-stack constraints.
PYSEC-2026-161  # starlette -> 1.0.1 (above fastapi's <0.50.0 ceiling)
CVE-2026-48817  # starlette -> 1.1.0 (above fastapi's <0.50.0 ceiling)
CVE-2026-48818  # starlette -> 1.1.0 (above fastapi's <0.50.0 ceiling)
CVE-2026-54282  # starlette -> 1.3.0 (above fastapi's <0.50.0 ceiling)
CVE-2026-54283  # starlette -> 1.3.1 (above fastapi's <0.50.0 ceiling)
