This is an automated email from the ASF dual-hosted git repository.
bryanck pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/iceberg.git
The following commit(s) were added to refs/heads/main by this push:
new 7f5027ceac Build: Ignore jackson-core CVEs shaded into parquet-jackson
(#18346)
7f5027ceac is described below
commit 7f5027ceac28e667e6b10f447bf7da9d13c98658
Author: Manu Zhang <[email protected]>
AuthorDate: Sat Oct 3 01:54:30 2026 +0800
Build: Ignore jackson-core CVEs shaded into parquet-jackson (#18346)
---
.github/trivyignore/kafka-connect-runtime.trivyignore | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/.github/trivyignore/kafka-connect-runtime.trivyignore
b/.github/trivyignore/kafka-connect-runtime.trivyignore
index 994f3c31e2..97a40acf29 100644
--- a/.github/trivyignore/kafka-connect-runtime.trivyignore
+++ b/.github/trivyignore/kafka-connect-runtime.trivyignore
@@ -40,3 +40,7 @@ CVE-2026-68497
# bumped to 1.18.1 (apache/iceberg#17321).
CVE-2026-91776
CVE-2026-91777
+# jackson-core CVEs shaded into parquet-jackson 1.17.1, only fixed in jackson
+# >= 2.18.11 / 2.21.7 / 2.22.3. Apache Parquet 1.18.1 still bundles 2.22.2.
+CVE-2026-89407
+CVE-2026-89425
