grype

Grype 一款用于容器镜像和文件系统的漏洞扫描器。 特性 扫描容器镜像 、文件系统 和SBOM 以发现已知漏洞（查看文档了解完整的支持的扫描目标列表） 支持主流操作系统软件包生态系统（Alpine、Debian、Ubuntu、RHEL、Oracle Linux、Amazon Linux 以及更多） 支持特定语言的软件包（Ruby、Java、JavaScript、Python、.NET、Go、PHP、Rust 以及更多） 支持 Docker、OCI 和 Singularity 镜像格式 通过 EPSS 、KEV 和 风险评分 进行威胁与风险优先级排序（参见解读结果文档） OpenVEX...

hoppr-cop

Hoppr-Cop 用于监管您的SBOM漏洞 Hoppr Cop 是一个 CLI 和 Python 库，它通过聚合多个漏洞数据库的数据，从 cyclone-dx 软件物料清单（SBOM）中生成高质量的漏洞信息。该项目是 hoppr 生态系统的一部分，但也可以作为独立的 CLI 或 Python 库完全使用。 更多信息请参阅项目文档 要求 Hoppr Cop 支持 CycloneDX 规范版本 1.3、1.4 和 1.5 扫描工具（如需使用则必备） grype -- 版本 0.73.0 或更高 trivy -- 版本 0.46.0 或更高 项目状态 初始版本 功能特点...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.119.0-0.1.hum1 aarch64, x8664 grype-0.119.0-0.1.hum1.src src...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.118.0-0.2.hum1 aarch64, x8664 grype-0.118.0-0.2.hum1.src src Security Fixes: grype: CVE-2026-88922...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CLEANSTART-2026-EF52160 Security fixes in grype 0.117.0-r1

Package grype version 0.117.0-r1 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.118.0-0.1.hum1 aarch64, x8664 grype-0.118.0-0.1.hum1.src src...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: kubescape, zarf, grype, syft, wolfictl, k9s...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: kubescape, kots, trivy, tfsec, zarf, trivy-fips, grype, tflint, zot, terragrunt, wolfictl, conftest-fips, conftest, terraform, snyk-cli, k9s...

GO-2026-4809 vulnerabilities

Vulnerabilities for packages: zarf-fips, kubescape, kubescape-operator-fips, kubescape-operator, xeol-fips, chainctl, zarf, grype-db, kubescape-server, chainctl-fips, cg, kubescape-server-fips, syft-fips, wolfictl, xeol, k9s-fips, k9s, guac...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: nuclei, filebrowser, chezmoi, trufflehog-fips, gptscript, cg, kots, undock, zarf, mattermost, syft, gotenberg, grype, mattermost-fips, wolfictl, k9s-fips, gitleaks, kubescape, trufflehog, chainctl, grype-db, grype-fips, syft-fips, k9s...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: cadvisor, docker, k3d, runc, skopeo, kots, skaffold, zarf, syft, kubernetes, kaniko, ctop, grype, wolfictl, podman, trivy, kubescape, k3s, newrelic-infrastructure-agent, buildkitd, zot, nerdctl, k9s...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, k8s-device-plugin, docker, kubernetes-fips, runc, grafana-alloy, neuvector-fips, syft, neuvector-scanner-fips, eks-distro-fips, eks-distro, kubernetes, cluster-autoscaler-fips, ctop, grype, cadvisor-fips, podman, neuvector,...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, cadvisor, kubernetes, buildah, ctop, grype, cadvisor-fips, wolfictl, opentelemetry-collector-contrib-fips, neuvector-scanner...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: flux-source-controller-fips, cert-manager-cmctl, opa-fips, xeol-fips, docker, helm, fuse-overlayfs-snapshotter, trivy-fips, k8ssandra-client-fips, helm-operator-fips, k8sgpt, consul-k8s-fips, rancher-fleet-fips, flux-helm-controller, neuvector-fips, kots, skaffold,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: atlantis-fips, nuclei, filebrowser, trufflehog-fips, xeol-fips, trivy-fips, vcluster, gptscript, drone, cg, trivy-operator, steampipe, skopeo-fips, rancher-fleet-fips, gitness, grafana-alloy, trivy-operator-fips, undock, zarf, vault, mattermost, rancher-fleet,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: amazon-ecs-agent-fips, trivy-fips, helm, kubescape-server, trivy-operator, kube-arangodb-fips, chaos-mesh-fips, headlamp-fips, k8sgpt, spegel-fips, zarf-fips, teleport, zarf, docker-cli-buildx-fips, kubescape-server-fips, manifest-tool, google-osconfig-agent,...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: zarf, k9s, kubescape, syft, wolfictl, grype...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: gitleaks, k9s, gptscript, trufflehog, zarf, kubescape, syft, filebrowser, wolfictl, kots, grype, chezmoi, undock, nuclei...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: zarf, wolfictl, kots, grype, podman, buildkitd, skopeo, ctop, kubescape, trivy, nerdctl, runc, skaffold, k3s, kaniko, syft, k3d, cadvisor, k9s, docker, zot, kubernetes, newrelic-infrastructure-agent...