122 matches found
Grype has a credential disclosure vulnerability in its JSON output
A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer in the form of registry credentials in JSON output files. When registry authentication is configured, an attacker can obtain registry credentials or other values e.g...
GHSA-6GXW-85Q2-Q646 Grype has a credential disclosure vulnerability in its JSON output
A credential disclosure vulnerability was found in Grype, affecting versions v0.68.0 through v0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registry credentials will be included unsanitized in the output file. Impact...
CVE-2025-65965: Improper Removal of Sensitive Information Before Storage or Transfer
Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json= option, the registr...
grype 安全漏洞
grype is a vulnerability scanning program from Anchore Open Source. A security vulnerability exists in grype versions 0.68.0 through 0.104.0, which stems from the inclusion of uncleaned registry credentials in the output file, potentially leading to credential disclosure...
PT-2025-48043
Name of the Vulnerable Software and Affected Versions Grype versions 0.68.0 through 0.104.0 Description Grype, a vulnerability scanner for container images and filesystems, contains a flaw where registry credentials can be improperly included in the output of a scan. This occurs when registry...
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: k3s, undock, zot, k8s-device-plugin, kubernetes, sriov-network-device-plugin, trivy, newrelic-infrastructure-agent, kubernetes-csi-driver-nfs, zarf, checksec, xeol, falco-no-driver, osv-scanner, skaffold, spegel, kubescape, k9s, nerdctl, syft, grype,...
GHSA-CGRX-MC8F-2PRM vulnerabilities
Vulnerabilities for packages: k3s, undock, zot, k8s-device-plugin, kubernetes, sriov-network-device-plugin, trivy, newrelic-infrastructure-agent, kubernetes-csi-driver-nfs, zarf, checksec, xeol, falco-no-driver, osv-scanner, skaffold, spegel, kubescape, k9s, nerdctl, syft, grype,...
GHSA-CGRX-MC8F-2PRM vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, zarf, kubernetes, kots, spegel, virt-handler-fips, grafana-alloy, neuvector-fips, neuvector-scanner, nerdctl-fips, cni-plugins-fips, falco-no-driver, nerdctl, cluster-autoscaler-fips, undock, newrelic-infrastructure-agent-fips, syft,...
CVE-2025-52881 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, zarf, kubernetes, kots, spegel, virt-handler-fips, grafana-alloy, neuvector-fips, neuvector-scanner, nerdctl-fips, cni-plugins-fips, falco-no-driver, nerdctl, cluster-autoscaler-fips, undock, newrelic-infrastructure-agent-fips, syft,...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: zot, rancher-fleet, trivy, zarf, conftest, xeol, terraform, kubescape, k9s, terragrunt, syft, snyk-cli, grype, opentofu, steampipe, tfsec, kots, trivy-operator, wolfictl, tflint...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: zot, rancher-fleet, trivy, zarf, conftest, xeol, terraform, kubescape, k9s, terragrunt, syft, snyk-cli, grype, opentofu, steampipe, tfsec, kots, trivy-operator, wolfictl, tflint...
CVE-2025-8959 vulnerabilities
Vulnerabilities for packages: k9s, rancher-fleet, trivy, opentofu, terragrunt, zarf, steampipe, chainctl, wolfictl, opentofu-fips, kots, tfsec, syft-fips, tflint, conftest-fips, xeol-fips, k9s-fips, terraform-fips, zot, syft, cloudbeat, trivy-operator, grype-fips, rancher-fleet-fips, conftest,...
GHSA-WJRX-6529-HCJ3 vulnerabilities
Vulnerabilities for packages: k9s, rancher-fleet, trivy, opentofu, terragrunt, zarf, steampipe, chainctl, wolfictl, opentofu-fips, kots, tfsec, syft-fips, tflint, conftest-fips, xeol-fips, k9s-fips, terraform-fips, zot, syft, cloudbeat, trivy-operator, grype-fips, rancher-fleet-fips, conftest,...
grype-db-0.35.0-1.1 on GA media (moderate)
grype-db-0.35.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15377-1 Rating: moderate Cross-References: CVE-2004-0377 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-db-0.35.0-1...
OPENSUSE-SU-2025:15377-1 grype-db-0.35.0-1.1 on GA media
These are all security issues fixed in the grype-db-0.35.0-1.1 package on the GA media of openSUSE Tumbleweed...
grype-0.94.0-1.1 on GA media (moderate)
grype-0.94.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15227-1 Rating: moderate Cross-References: CVE-2025-5702 CVSS scores: CVE-2025-5702 SUSE : 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2025-5702 SUSE : 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N...