Syft improper temporary file cleanup

Impact Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When scanning archives Syft will unpack those archives into temporary storage then inspect the unpacked contents. Under normal operation Syft will remove the...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: trino, mariadb-operator, net-kourier, lvm-driver, crossplane-provider-aws-elasticache, syft, crossplane-provider-aws-cloudfront, gitaly, restic, sriov-network-device-plugin, flux-image-reflector-controller, kubernetes-csi-external-attacher, kubernetes-event-exporter,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: trino, mariadb-operator, net-kourier, lvm-driver, crossplane-provider-aws-elasticache, syft, crossplane-provider-aws-cloudfront, gitaly, restic, sriov-network-device-plugin, flux-image-reflector-controller, kubernetes-csi-external-attacher, kubernetes-event-exporter,...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: mariadb-operator, crossplane-provider-aws-cloudfront, restic, wgcf, flux-image-reflector-controller, opentofu, azcopy, swagger, knative-operator, tailscale, prometheus-operator, rootlesskit, step, libnvidia-container, smokescreen, crossplane-provider-aws-ec2,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: mariadb-operator, crossplane-provider-aws-cloudfront, restic, wgcf, flux-image-reflector-controller, opentofu, azcopy, swagger, knative-operator, tailscale, prometheus-operator, rootlesskit, step, libnvidia-container, smokescreen, crossplane-provider-aws-ec2,...

GHSA-RV83-G57W-FR8J vulnerabilities

Vulnerabilities for packages: mariadb-operator, crossplane-provider-aws-cloudfront, restic, wgcf, flux-image-reflector-controller, opentofu, azcopy, swagger, knative-operator, tailscale, prometheus-operator, rootlesskit, step, libnvidia-container, smokescreen, crossplane-provider-aws-ec2,...

CVE-2026-27139 vulnerabilities

Vulnerabilities for packages: mariadb-operator, crossplane-provider-aws-cloudfront, restic, wgcf, flux-image-reflector-controller, opentofu, azcopy, swagger, knative-operator, tailscale, prometheus-operator, rootlesskit, step, libnvidia-container, smokescreen, crossplane-provider-aws-ec2,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, azurefile-csi-fips, aws-fsx-csi-driver-fips, knative-operator-fips, nri-apache, atlantis, kubewatch, crossplane-provider-aws-efs-fips, apache-exporter, nats, step-fips, gitlab-runner, ytt, opensearch-k8s-operator-fips,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, azurefile-csi-fips, aws-fsx-csi-driver-fips, knative-operator-fips, atlantis, crossplane-provider-aws-efs-fips, apache-exporter, step-fips, gitlab-runner, ingress-nginx-controller-fips, gosu, oauth2-proxy-fips, kube-arangodb-fips,...

GHSA-9H8M-3FM2-QJRQ vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips, helm-operator-fips, azurefile-csi-fips, aws-node-termination-handler, docker-fips, kubevirt-cdi-operator-fips, gitlab-runner, gitlab-cng, kube-arangodb-fips, cloud-provider-azure-fips, aws-node-termination-handler-fips, sftpgo-plugin-kms,...

OPENSUSE-SU-2026:10228-1 syft-1.42.1-1.1 on GA media

These are all security issues fixed in the syft-1.42.1-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2023-0732

Malicious code in bioql PyPI...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: snyk-cli, trivy, syft, steampipe, xeol, zot, terragrunt, opentofu, zarf, conftest, k9s, trivy-operator, kubescape, tfsec, terraform, rancher-fleet, tflint, grype, wolfictl, kots...

GHSA-WJRX-6529-HCJ3 vulnerabilities

Vulnerabilities for packages: snyk-cli, trivy, syft, steampipe, xeol, zot, terragrunt, opentofu, zarf, conftest, k9s, trivy-operator, kubescape, tfsec, terraform, rancher-fleet, tflint, grype, wolfictl, kots...

CVE-2025-8959 vulnerabilities

Vulnerabilities for packages: k9s, grype, terraform-fips, zot, xeol, zarf, grype-fips, wolfictl, k9s-fips, tflint, xeol-fips, cloudbeat-fips, grype-db, terragrunt, opentofu, tfsec, rancher-fleet, terraform, trivy, trivy-operator, syft, trivy-operator-fips, kubescape, opentofu-fips, syft-fips,...

CVE-2025-54388 vulnerabilities

Vulnerabilities for packages: kargo, k9s, prometheus-fips, docker-cli-buildx, trufflehog-fips, opentelemetry-collector-contrib-fips, docker-compose-fips, apko-fips, grype, buildkitd, zot, elastic-agent, goreleaser, beats-fips, zarf, grype-fips, aws-otel-collector, opentelemetry-collector-contrib,...

CVE-2023-24827

syft is a a CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFTATTESTPASSWORD environment variable. The...

GHSA-265R-HFXG-FHMG vulnerabilities

Vulnerabilities for packages: cilium-cli, trivy, opa, syft, xeol, dagger, k3s, linkerd2, spegel, zot, docker-cli-buildx, docker-compose, kaniko, opa-envoy, osv-scanner, zarf, nerdctl, kargo, docker, kubescape, newrelic-infrastructure-agent, neuvector-scanner, helm-operator, helm-push, melange,...

GHSA-JFVP-7X6P-H2PV vulnerabilities

Vulnerabilities for packages: kubernetes, opentelemetry-collector-contrib, ctop, syft, k3s, cadvisor, docker, grype, buildah, podman, runc, k8s-device-plugin, neuvector-scanner, grafana-alloy...

CVE-2024-45310 vulnerabilities

Vulnerabilities for packages: grafana-alloy-fips, opentelemetry-collector-contrib-fips, grype, grafana-alloy, cluster-autoscaler, docker, neuvector-fips, opentelemetry-collector-contrib, neuvector-scanner, ctop, cluster-autoscaler-fips, gosu, kubernetes-fips, eks-distro, cadvisor-fips, cadvisor,...