CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

GO-2025-4160 Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype

Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...

GHSA-6GXW-85Q2-Q646 Grype has a credential disclosure vulnerability in its JSON output

A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...

Grype has a credential disclosure vulnerability in its JSON output

A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...

grype 安全漏洞

grype is a vulnerability scanning program from Anchore Open Source. A security vulnerability exists in grype versions 0.68.0 through 0.104.0, which stems from the inclusion of uncleaned registry credentials in the output file, potentially leading to credential disclosure...

PT-2025-48043

Name of the Vulnerable Software and Affected Versions Grype versions 0.68.0 through 0.104.0 Description Grype, a vulnerability scanner for container images and filesystems, contains a flaw where registry credentials can be improperly included in the output of a scan. This occurs when registry...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, syft, envoy-gateway, buildah, kubernetes, grafana-alloy, trivy-operator, grype, newrelic-infrastructure-agent, spegel, checksec, ctop, zarf, wolfictl, kubescape-operator, k9s, dagger, kubescape, skaffold, skopeo, neuvector-scanner, zot, podman...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, syft, envoy-gateway, buildah, kubernetes, grafana-alloy, trivy-operator, grype, newrelic-infrastructure-agent, spegel, checksec, ctop, zarf, wolfictl, kubescape-operator, k9s, dagger, kubescape, skaffold, skopeo, neuvector-scanner, zot, podman...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: nerdctl-fips, trivy-fips, chainctl, undock, skaffold, google-osconfig-agent, virt-handler-fips, virt-launcher, trivy-operator-fips, xeol, blob-csi, syft-fips, volcano, kubernetes-csi-driver-nfs, spegel, datadog-agent, zarf, trivy-operator, mesosphere-vsphere-csi,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: nerdctl-fips, trivy-fips, chainctl, undock, skaffold, google-osconfig-agent, virt-handler-fips, virt-launcher, trivy-operator-fips, xeol, blob-csi, syft-fips, volcano, kubernetes-csi-driver-nfs, spegel, datadog-agent, zarf, trivy-operator, mesosphere-vsphere-csi,...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: syft, tfsec, steampipe, trivy-operator, grype, tflint, terragrunt, zarf, wolfictl, k9s, kubescape, conftest, zot, terraform, trivy, xeol, snyk-cli, rancher-fleet, kots, opentofu...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: syft, tfsec, steampipe, trivy-operator, grype, tflint, terragrunt, zarf, wolfictl, k9s, kubescape, conftest, zot, terraform, trivy, xeol, snyk-cli, rancher-fleet, kots, opentofu...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy, k9s-fips, conftest, xeol-fips, cloudbeat-fips, rancher-fleet, trivy-fips, tflint, steampipe, rancher-fleet-fips, wolfictl, chainctl, terragrunt, grype-fips, terraform, trivy-operator-fips, xeol, k9s, terraform-fips, kubescape, syft-fips, grype, zot, snyk-cli,...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy, k9s-fips, conftest, xeol-fips, cloudbeat-fips, rancher-fleet, trivy-fips, tflint, steampipe, rancher-fleet-fips, wolfictl, chainctl, terragrunt, grype-fips, terraform, trivy-operator-fips, xeol, k9s, terraform-fips, kubescape, syft-fips, grype, zot, snyk-cli,...

grype-db-0.35.0-1.1 on GA media (moderate)

grype-db-0.35.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15377-1 Rating: moderate Cross-References: CVE-2004-0377 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-db-0.35.0-1...

OPENSUSE-SU-2025:15377-1 grype-db-0.35.0-1.1 on GA media

These are all security issues fixed in the grype-db-0.35.0-1.1 package on the GA media of openSUSE Tumbleweed...

grype-0.94.0-1.1 on GA media (moderate)

grype-0.94.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15227-1 Rating: moderate Cross-References: CVE-2025-5702 CVSS scores: CVE-2025-5702 SUSE : 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-5702 SUSE : 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...