grype v0.116.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: buildah, docker-credential-acr-env, newrelic-fluent-bit-output, prometheus-alertmanager, aws-eks-pod-identity-agent, azcopy, aws-flb-cloudwatch, temporal-server, tetragon, vertical-pod-autoscaler, nodetaint, nri-kubernetes, opentelemetry-operator, kine,...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.115.0-0.1.hum1 aarch64, x8664 grype-0.115.0-0.1.hum1.src src...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: terragrunt, melange, fulcio, grype-fips, teleport-operator-fips, skaffold, crossplane-provider-aws-osis, crossplane-provider-aws-cloudformation, consul, drone-fips, crossplane-provider-aws-rolesanywhere, gitlab-runner-fips, flux-source-controller-fips,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: terragrunt, melange, fulcio, grype-fips, teleport-operator-fips, skaffold, crossplane-provider-aws-osis, crossplane-provider-aws-cloudformation, consul, drone-fips, crossplane-provider-aws-rolesanywhere, gitlab-runner-fips, flux-source-controller-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: docker, buildah, trivy, spire-server, fscrypt, gatus, argo-events, external-secrets-operator, minio, prometheus, gitlab-kas, vault-benchmark, external-dns, pulumi-language-java, step-kms-plugin, kaf, sops, terraform-provider-azurerm, kubescape, kine, melange, helm,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: buildah, trivy, spire-server, fscrypt, external-secrets-operator, argo-events, minio, prometheus, gitlab-kas, external-dns, pulumi-language-java, step-kms-plugin, kaf, kubescape, kine, melange, helm, go-discover, gptscript, zarf, nfpm, cilium-cli, act, caddy,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, upwind-agent, helm, xeol, kubescape,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, upwind-agent, helm, xeol, kubescape,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, beats-fips, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: helm-mapkubeapis, rancher-helm, grype-fips, skaffold, docker-fips, datadog-agent, harvester-fips, crossplane-fips, chaos-mesh, helm-operator-fips, newrelic-infrastructure-agent, amazon-ecs-agent-fips, amazon-ecs-agent, helm, xeol, kubescape, headlamp-fips, helm-push,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, external-secrets-operator, terragrunt, melange, goreleaser, grype-fips, skaffold, gitea-fips, gomplate, pulumi-kubernetes-operator, crossplane-fips, gitlab-runner-fips, src-fingerprint-fips, cerbos, upwind-agent, flux-source-controller-fips, xeol...

GHSA-3XC5-WRHM-F963 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, external-secrets-operator, terragrunt, melange, goreleaser, grype-fips, skaffold, gitea-fips, gomplate, pulumi-kubernetes-operator, crossplane-fips, gitlab-runner-fips, src-fingerprint-fips, cerbos, upwind-agent, flux-source-controller-fips, xeol...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: conftest, terragrunt, zarf, syft, grype-fips, xeol-fips, terraform, kubescape-server-fips, chainctl-fips, cg, conftest-fips, tfsec, steampipe, trivy-operator-fips, grype-db, cloudbeat, trivy-operator, opentofu-fips, tflint-fips, cloudbeat-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: conftest, terragrunt, zarf, syft, grype-fips, xeol-fips, terraform, kubescape-server-fips, chainctl-fips, cg, conftest-fips, tfsec, steampipe, trivy-operator-fips, grype-db, cloudbeat, trivy-operator, opentofu-fips, tflint-fips, cloudbeat-fips,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, external-secrets-operator, melange, grype-fips, skaffold, gitea-fips, gomplate, pulumi-kubernetes-operator, crossplane-fips, gitlab-runner-fips, src-fingerprint-fips, cerbos, flux-source-controller-fips, xeol, kubescape, bom, wolfictl,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, external-secrets-operator, melange, grype-fips, skaffold, gitea-fips, gomplate, pulumi-kubernetes-operator, crossplane-fips, gitlab-runner-fips, src-fingerprint-fips, cerbos, flux-source-controller-fips, xeol, kubescape, bom, wolfictl,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, external-secrets-operator, melange, grype-fips, skaffold, gitea-fips, gomplate, pulumi-kubernetes-operator, crossplane-fips, gitlab-runner-fips, src-fingerprint-fips, cerbos, flux-source-controller-fips, xeol, kubescape, bom, wolfictl,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: grype, pulumi-language-dotnet, gitsign, kots, nfpm, zarf, k9s, teleport, cerbos, trivy, bom, dagger, crossplane, external-secrets-operator, argo-events, apko, chezmoi, nuclei, argo-cd, witness, pulumi, pulumi-language-java, gitea, syft, wolfictl, argocd-image-updater...