# Findings reviewed and knowingly accepted. Every entry names its drop
# condition; the weekly supply-chain sweep is the review point. No bare
# catch-alls — the gate stays actionable for anything not listed here.

# openssl 3.5.6-1~deb13u2 in the pinned base (HIGH, CVE-2026-14456):
# unbounded memory growth in the QUIC server path — DoS only. Three
# binary packages (openssl, libssl3t64, openssl-provider-legacy) share
# the source, so Trivy counts it three times. Fixed in Debian trixie as
# 3.5.7-1~deb13u2, but no python:3.14-slim rebuild carries the fix yet
# and the digest is pinned. The container never terminates QUIC inbound:
# PID 1 is `anyhop run` as uid 1000, the listeners are the HTTP+SOCKS
# router and the opt-in REST API, and QUIC only ever appears as an
# outbound client protocol for some VPN providers.
# Added: 2026-08-26. Drop when: the base ships openssl >= 3.5.7-1~deb13u2
# (dependabot tracks the slim tag and will open the PR).
CVE-2026-14456

# msgpack 1.1.2 vendored inside pip (GHSA-6v7p-g79w-8964, HIGH): unpacker
# out-of-bounds read on untrusted data. The image's only pip runs happen at
# build time, against the hash-pinned requirements.lock and the
# checksum-verified wheel — pip never unpacks untrusted msgpack in the
# running container.
# Added: 2026-08-17. Drop when: the base ships pip with vendored
# msgpack >= 1.2.1.
GHSA-6v7p-g79w-8964

# setuptools 70.3.0 attributed to the pinned base (CVE-2025-47273, HIGH):
# PackageIndex path traversal. Pathless: it exists only in the official
# image's embedded SBOM ("AnalyzedBy: sbom", no file), not in the image
# filesystem — no layer, pip/_vendor, or ensurepip entry carries it, so
# filesystem checks cannot see this finding; only the scan can. setuptools
# is never invoked at runtime anyway — PID 1 is `anyhop run`, and pip itself
# only runs at build time against the hash-pinned lock.
# Added: 2026-08-17; re-added 2026-08-26 after removal on a filesystem
# check that could not see SBOM attributions (see above). Drop when: the
# base SBOM stops claiming setuptools 70.3.0 or claims >= 78.1.1.
CVE-2025-47273
