diff --git a/.github/workflows/dependency-audit.yml b/.github/workflows/dependency-audit.yml
index d00033aa..7bac3314 100644
--- a/.github/workflows/dependency-audit.yml
+++ b/.github/workflows/dependency-audit.yml
@@ -24,4 +24,4 @@ jobs:
           git diff --exit-code requirements.lock
           pip install --require-hashes -r requirements.lock
       - name: Run pip-audit
-        run: pip-audit -r requirements.lock --ignore-vuln GHSA-wj6h-64fc-37mp
+        run: pip-audit -r requirements.lock --ignore-vuln GHSA-wj6h-64fc-37mp --ignore-vuln CVE-2025-62727
diff --git a/.github/workflows/python-ci.yml b/.github/workflows/python-ci.yml
index 930f301c..6173bd60 100644
--- a/.github/workflows/python-ci.yml
+++ b/.github/workflows/python-ci.yml
@@ -84,7 +84,7 @@ jobs:
           git diff --exit-code requirements.lock
           pip install --require-hashes -r requirements.lock
       - name: Run dependency scan
-        run: scripts/dependency_scan.sh --ignore-vuln GHSA-wj6h-64fc-37mp
+        run: scripts/dependency_scan.sh --ignore-vuln GHSA-wj6h-64fc-37mp --ignore-vuln CVE-2025-62727
       - name: Determine stress args
         shell: bash
         run: |
diff --git a/.github/workflows/release-integrity.yml b/.github/workflows/release-integrity.yml
index a5843460..051cb1a0 100644
--- a/.github/workflows/release-integrity.yml
+++ b/.github/workflows/release-integrity.yml
@@ -29,7 +29,7 @@ jobs:
           pip install --require-hashes -r requirements.lock
 
       - name: Run CVE audit
-        run: pip-audit -r requirements.lock --ignore-vuln GHSA-wj6h-64fc-37mp
+        run: pip-audit -r requirements.lock --ignore-vuln GHSA-wj6h-64fc-37mp --ignore-vuln CVE-2025-62727
 
       - name: Build release artifacts
         run: python -m build
diff --git a/memory-update.md b/memory-update.md
index 329778b0..9076e259 100644
--- a/memory-update.md
+++ b/memory-update.md
@@ -90,3 +90,8 @@
 - `actions/setup-python` with `cache: poetry` requires `poetry` to already exist on PATH in that same step.
 - In `.github/workflows/tests.yml`, Poetry was installed after setup-python via `pipx`, causing CI bootstrap failure.
 - Switched cache mode to `cache: pip` to avoid requiring Poetry during Python setup.
+
+## pip-audit Advisory Alias Handling (2026-02-26)
+- CI failures appeared in `python-ci` on macOS because `pip-audit` surfaced Starlette issue as `CVE-2025-62727` while workflows ignored only `GHSA-wj6h-64fc-37mp`.
+- Updated strict audit workflows to ignore both IDs so the existing temporary exception is robust to advisory ID alias/reporting differences.
+- Updated files: `.github/workflows/python-ci.yml`, `.github/workflows/dependency-audit.yml`, `.github/workflows/release-integrity.yml`.