Search results

not showing expat CVEs from syft generated sbom

bugSomething isn't workingSomething isn't working

Status: Open.

#3333 In anchore/grype;

· d3matt opened on Mar 31, 2026

Proposal: zarf package scan target

enhancementNew feature or requestNew feature or request

multiple-sourcesIssues that are dependent on supporting multiple sourcesIssues that are dependent on supporting multiple sources

needs-investigation

needs-proposalShould be done but needs proposal/design for further discussionShould be done but needs proposal/design for further discussion

Status: Open.

#3329 In anchore/grype;

· brandtkeller opened on Mar 31, 2026

--only-fixed seems not to work with python

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3312 In anchore/grype;

· ruben-herold opened on Mar 25, 2026

Proposal: Support OCI image as the primary vulnerable software entity (Image-as-a-Product)

enhancementNew feature or requestNew feature or request

needs-discussion

Status: Open.

#3302 In anchore/grype;

· willmurphyscode opened on Mar 20, 2026

False Positive: GHSA-38jv-5279-wg99 (CVE-2026-21441) urllib3 coming from Python ecosystem

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3296 In anchore/grype;

· etarast opened on Mar 19, 2026

Numerous OSV transformer improvements proposed simultaneously

osvThings to do with OSV formatted data, osv.dev, etc.Things to do with OSV formatted data, osv.dev, etc.

Status: Open.

#3294 In anchore/grype;

· willmurphyscode opened on Mar 17, 2026

False positive findings in Grype

bugSomething isn't workingSomething isn't working

Status: Open.

#3288 In anchore/grype;

· ashu4 opened on Mar 17, 2026

grype detects npm issues in composer packages if the contain package.json file

bugSomething isn't workingSomething isn't working

Status: Open.

#3279 In anchore/grype;

· yariksheptykin opened on Mar 11, 2026

Show indication of DB lifecycle status in the CLI output

databaseRelating to the grype DB assetRelating to the grype DB asset

enhancementNew feature or requestNew feature or request

Status: Open.

#3275 In anchore/grype;

· wagoodman opened on Mar 10, 2026

False Negative: CVE-2025-53506

bugSomething isn't workingSomething isn't working

false-negative

Status: Open.

#3268 In anchore/grype;

· bennypi opened on Mar 5, 2026

Support for OWASP Risk Ratings in VEX documents

enhancementNew feature or requestNew feature or request

vexrelating to vulnerability exchange documentsrelating to vulnerability exchange documents

Status: Open.

#3262 In anchore/grype;

· fahedouch opened on Mar 3, 2026

GHSA-mrrh-fwg8-r2c3 mismatch issue

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3259 In anchore/grype;

· huornlmj opened on Mar 3, 2026