# Findings reviewed and knowingly accepted. Every entry names its drop
# condition; the weekly supply-chain sweep is the review point. No bare
# catch-alls — the gate stays actionable for anything not listed here.

# msgpack 1.1.2 vendored inside pip (GHSA-6v7p-g79w-8964, HIGH): unpacker
# out-of-bounds read on untrusted data. The image's only pip runs happen at
# build time, against the hash-pinned requirements.lock and the
# checksum-verified wheel — pip never unpacks untrusted msgpack in the
# running container.
# Added: 2026-08-17. Drop when: the base ships pip with vendored
# msgpack >= 1.2.1.
GHSA-6v7p-g79w-8964

# setuptools 70.3.0 attributed to the pinned base (CVE-2025-47273, HIGH):
# PackageIndex path traversal. Pathless: it exists only in the official
# image's embedded SBOM ("AnalyzedBy: sbom", no file), not in the image
# filesystem — no layer, pip/_vendor, or ensurepip entry carries it, so
# filesystem checks cannot see this finding; only the scan can. setuptools
# is never invoked at runtime anyway — PID 1 is `anyhop run`, and pip itself
# only runs at build time against the hash-pinned lock.
# Added: 2026-08-17; re-added 2026-08-26 after removal on a filesystem
# check that could not see SBOM attributions (see above). Drop when: the
# base SBOM stops claiming setuptools 70.3.0 or claims >= 78.1.1.
CVE-2025-47273
