Merge pull request #2405 from IABTechLab/swi-suppress-25646

Suppress CVE-2026-25646: fixed image not yet available

Author: swibi-ttd

.trivyignore

@@ -14,4 +14,8 @@ CVE-2026-1584 exp:2026-08-27
 
 # jackson-core async parser DoS - not exploitable, services only use synchronous ObjectMapper API
 # See: UID2-6670
-GHSA-72hv-8253-57qq exp:2026-09-01
+GHSA-72hv-8253-57qq exp:2026-09-01
+
+# libpng heap buffer overflow in Alpine base image - fixed version not yet available in Alpine 3.23
+# See: UID2-6677
+CVE-2026-25646 exp:2026-09-02