diff --git a/.grype.yaml b/.grype.yaml
index 3f59d2c..ad0078c 100644
--- a/.grype.yaml
+++ b/.grype.yaml
@@ -1,39 +1,6 @@
 # Managed by renovate-runner/scripts/reconcile-grype.sh - do not edit by hand.
-# Entries are High,Critical findings with no fix reachable in this image.
+# Entries are High,Critical findings with a fix that no base image update provides.
 ignore:
-  - vulnerability: CVE-2026-103111
-    package:
-      name: pcre2
-  - vulnerability: CVE-2026-4775
-    package:
-      name: tiff
-  - vulnerability: CVE-2026-54873
-    package:
-      name: libcrypto3
-  - vulnerability: CVE-2026-54873
-    package:
-      name: libssl3
-  - vulnerability: CVE-2026-72897
-    package:
-      name: libcrypto3
-  - vulnerability: CVE-2026-72897
-    package:
-      name: libssl3
-  - vulnerability: CVE-2026-84782
-    package:
-      name: libcrypto3
-  - vulnerability: CVE-2026-84782
-    package:
-      name: libssl3
-  - vulnerability: CVE-2026-84784
-    package:
-      name: libcrypto3
-  - vulnerability: CVE-2026-84784
-    package:
-      name: libssl3
   - vulnerability: CVE-2026-85091
     package:
       name: zlib
-  - vulnerability: CVE-2026-93990
-    package:
-      name: libexpat