Skip to content

Issues: anchore/grype

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

288 Open 645 Closed
288 Open 645 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Support embedded CycloneDX VEX documents bug Something isn't working enhancement New feature or request format:cyclonedx CycloneDX related enhancement or bug
#2462 opened Feb 19, 2025 by asadjaffar
1
Replace nvdtools CPE library bug Something isn't working
#2461 opened Feb 19, 2025 by asadjaffar
1
DB list (json) should be a list bug Something isn't working
#2459 opened Feb 18, 2025 by wagoodman DB v6
1
@wagoodman
Remove the VulnerabilityMetadataProvider
#2456 opened Feb 18, 2025 by kzantow Grype 1.0
Remove PackageSearchNames from VulnerabilityProvider
#2455 opened Feb 18, 2025 by kzantow Grype 1.0
feat: include modularity (and other package qualifiers) in match details when matched package is an RPM from a module enhancement New feature or request
#2452 opened Feb 17, 2025 by willmurphyscode
Difficulties in cross-clone version comparison
#2451 opened Feb 17, 2025 by willmurphyscode
CVE-2024-53104 (Redhat 9.4) bug Something isn't working
#2446 opened Feb 13, 2025 by pkeecom
1
DB diff vulnerability metadata enhancement New feature or request
#2443 opened Feb 12, 2025 by driessamyn
2
False positive: GHSA-w3h3-4rj7-4ph4 (CVE-2024-1135) python311-gunicorn in SLES 15 SP6 Eco-system. bug Something isn't working
#2428 opened Feb 5, 2025 by sekveaja
grype doesnt work with the cycloneDX syntax enhancement New feature or request
#2423 opened Feb 4, 2025 by Sirdorblu
2
"WARN merging packages have with different pURLs" from the same package in multiple architectures bug Something isn't working
#2422 opened Feb 3, 2025 by brians-neptune
1
Main Component Version gets lost from CycloneDX when throwing Grype at it bug Something isn't working
#2418 opened Feb 1, 2025 by SimonHeidrich
False positive of CVE-2023-45853 on apt zlib1g/now 1:1.2.13.dfsg-1 package bug Something isn't working
#2412 opened Jan 28, 2025 by electronicapc DB v6
@wagoodman
10
Report errors directly to the user and document enhancement New feature or request json dealing with the json format
#2393 opened Jan 22, 2025 by wagoodman Grype 1.0
false negative for cpe:2.3:o:linux:linux_kernel:6.6.16:*:*:*:*:*:*:* bug Something isn't working
#2365 opened Jan 8, 2025 by jurassicLizard
3
Grype exits with error on JSON output with PURL input bug Something isn't working
#2360 opened Jan 2, 2025 by chovanecadam
scan a large sbom in batches enhancement New feature or request
#2357 opened Jan 1, 2025 by TimBrown1611
4
False positive of CVE-2022-32511 on apk package py3-jmespath bug Something isn't working
#2348 opened Dec 20, 2024 by samcornwell
1
False positive: CVE-2017-11624 CVE-2017-11625 CVE-2017-11627 on libqpdf26 package, FIXED-IN confusion between libqpdf26 and qpdf bug Something isn't working
#2345 opened Dec 19, 2024 by sekveaja
Likely false positives for erlang otp bug Something isn't working
#2344 opened Dec 19, 2024 by sameerkattel
2
False positive: GHSA-6vqw-3v5j-54x4_CVE-2024-26130 python311-cryptography with SLES 15.5 and SLES 15.6 due to noise from Syft bug Something isn't working
#2342 opened Dec 18, 2024 by sekveaja
possible false positives: unicorn package, qnx SDK package bug Something isn't working
#2336 opened Dec 17, 2024 by jurassicLizard
5
False negative: vulns in AL2023 rpm packages were reported but then disappeared bug Something isn't working
#2333 opened Dec 16, 2024 by sparrowt
5
FP in upstream of a package that doesn't exist bug Something isn't working
#2327 opened Dec 12, 2024 by tomersein
ProTip! Type g p on any issue or pull request to go back to the pull request listing page.