diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 15a7ec0..98fa811 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -11,4 +11,4 @@ jobs:
       contents: read
       pull-requests: write
     steps:
-      - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@94f7e40aa557a2790abfa98a9cc9186d260b94f8 # v1.0.27
+      - uses: it-at-m/lhm_actions/action-templates/actions/action-dependency-review@bug/356-prs-blocked-because-of-cves-being-reported-by-dependency-review-action
diff --git a/.trivyignore b/.trivyignore
index e69de29..b6ed943 100644
--- a/.trivyignore
+++ b/.trivyignore
@@ -0,0 +1,2 @@
+CVE-2025-10492
+CVE-2026-6009
diff --git a/backend/pom.xml b/backend/pom.xml
index 57a56b7..fd8d57a 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -86,6 +86,13 @@
     </properties>
 
     <dependencies>
+
+        <dependency>
+            <groupId>net.sf.jasperreports</groupId>
+            <artifactId>jasperreports</artifactId>
+            <version>6.21.4</version>
+        </dependency>
+        
         <!-- Spring Boot -->
         <dependency>
             <groupId>org.springframework.boot</groupId>