From dd3a38246679cad3d5bba138084ac17bf22d0fdd Mon Sep 17 00:00:00 2001
From: Chingis S <chingis@chingis.io>
Date: Sun, 20 Sep 2026 08:18:12 +0400
Subject: [PATCH] Temporarily accept Python 3.13 tarfile vulnerability

Scope the Grype exception for CVE-2026-82049 to the Python 3.13.15 binary package while awaiting a fixed upstream image. Track removal in issue #12.
---
 .grype.yaml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.grype.yaml b/.grype.yaml
index 713bed0..63417f9 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -7,3 +7,11 @@ ignore:
       name: python
       version: 3.10.21
       type: binary
+  # Temporary acceptance until the official Python 3.13 image includes the tarfile fix.
+  # https://github.com/python/cpython/pull/157192
+  # Remove after upgrading: https://github.com/wodby/python/issues/12
+  - vulnerability: CVE-2026-82049
+    package:
+      name: python
+      version: 3.13.15
+      type: binary