CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965

CVE-2025-65965 affects Grype versions 0.68.0–0.104.0 . If registry credentials are configured and Grype output is written with --file or --output json= , the credentials can be included in the output file in an unsanitized form. A fix is available in 0.104.1 . Workaround: avoid those options and ...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

EUVD-2025-199596

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...

GO-2025-4160 Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype

Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...

GHSA-6GXW-85Q2-Q646 Grype has a credential disclosure vulnerability in its JSON output

A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...

Improper Removal of Sensitive Information Before Storage or Transfer

Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...

Grype has a credential disclosure vulnerability in its JSON output

A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...

grype 安全漏洞

grype is a vulnerability scanning program from Anchore Open Source. A security vulnerability exists in grype versions 0.68.0 through 0.104.0, which stems from the inclusion of uncleaned registry credentials in the output file, potentially leading to credential disclosure...

PT-2025-48043

Name of the Vulnerable Software and Affected Versions Grype versions 0.68.0 through 0.104.0 Description Grype, a vulnerability scanner for container images and filesystems, contains a flaw where registry credentials can be improperly included in the output of a scan. This occurs when registry...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, neuvector-scanner, trivy-operator, nvidia-container-toolkit, wolfictl, checksec, envoy-gateway, kubernetes, newrelic-infrastructure-agent, k9s, k3s, spegel, grype, xeol, kubescape-operator, mesosphere-vsphere-csi, undock, podman, kots,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-nfs, neuvector-scanner, trivy-operator, nvidia-container-toolkit, wolfictl, checksec, envoy-gateway, kubernetes, newrelic-infrastructure-agent, k9s, k3s, spegel, grype, xeol, kubescape-operator, mesosphere-vsphere-csi, undock, podman, kots,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, xeol-fips, prometheus-podman-exporter-fips, nvidia-container-toolkit, zot, grype, trivy-operator-fips, virt-launcher, mesosphere-vsphere-csi, kots, trivy-operator, k8s-device-plugin, longhorn-share-manager, syft, azure-container-networking...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter, xeol-fips, prometheus-podman-exporter-fips, nvidia-container-toolkit, zot, grype, trivy-operator-fips, virt-launcher, mesosphere-vsphere-csi, kots, trivy-operator, k8s-device-plugin, longhorn-share-manager, syft, azure-container-networking...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: trivy-operator, wolfictl, terragrunt, snyk-cli, k9s, conftest, xeol, grype, tflint, kots, trivy, kubescape, zarf, syft, opentofu, steampipe, terraform, tfsec, rancher-fleet, zot...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: trivy-operator, wolfictl, terragrunt, snyk-cli, k9s, conftest, xeol, grype, tflint, kots, trivy, kubescape, zarf, syft, opentofu, steampipe, terraform, tfsec, rancher-fleet, zot...