From 886cd2918df6e519a461426f9488f4475bae4a18 Mon Sep 17 00:00:00 2001
From: Michael Li <michael.li@hashicorp.com>
Date: Fri, 31 Jul 2026 10:15:17 -0400
Subject: [PATCH] chore: Suppress CVE-2026-41989 (#6772)

---
 .release/security-scan.hcl | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.release/security-scan.hcl b/.release/security-scan.hcl
index 74cf4c314..f1e9adcd3 100644
--- a/.release/security-scan.hcl
+++ b/.release/security-scan.hcl
@@ -34,7 +34,12 @@ container {
 				# iputils@20240905-r0 https://nvd.nist.gov/vuln/detail/CVE-2025-48964
 				#
 				# Boundary does not utilize ping in iputils.
-				"CVE-2025-48964"
+				"CVE-2025-48964",
+
+				# libgcrypt@1.10.3-r1 https://nvd.nist.gov/vuln/detail/CVE-2026-41989
+				#
+				# There is no fix available in the Alpine Docker image yet.
+				"CVE-2026-41989",
 			]
 		}
 	}