grype

Grype 一款用于容器镜像和文件系统的漏洞扫描器。 特性 扫描容器镜像 、文件系统 和SBOM 以发现已知漏洞（查看文档了解完整的支持的扫描目标列表） 支持主流操作系统软件包生态系统（Alpine、Debian、Ubuntu、RHEL、Oracle Linux、Amazon Linux 以及更多） 支持特定语言的软件包（Ruby、Java、JavaScript、Python、.NET、Go、PHP、Rust 以及更多） 支持 Docker、OCI 和 Singularity 镜像格式 通过 EPSS 、KEV 和 风险评分 进行威胁与风险优先级排序（参见解读结果文档） OpenVEX...

hoppr-cop

Hoppr-Cop 用于监管您的SBOM漏洞 Hoppr Cop 是一个 CLI 和 Python 库，它通过聚合多个漏洞数据库的数据，从 cyclone-dx 软件物料清单（SBOM）中生成高质量的漏洞信息。该项目是 hoppr 生态系统的一部分，但也可以作为独立的 CLI 或 Python 库完全使用。 更多信息请参阅项目文档 要求 Hoppr Cop 支持 CycloneDX 规范版本 1.3、1.4 和 1.5 扫描工具（如需使用则必备） grype -- 版本 0.73.0 或更高 trivy -- 版本 0.46.0 或更高 项目状态 初始版本 功能特点...

CVE-2026-53493 vulnerabilities

Vulnerabilities for packages: k3s, rancher-helm, buildkitd, trivy-operator, kubescape-operator, docker, syft, trivy, helm-push, rancher, steampipe, eksctl, zarf, nerdctl, k9s, gatekeeper, k8sgpt, manifest-tool, newrelic-infrastructure-agent, neuvector-scanner, dagger, kubescape, helm-mapkubeapis,...

syft v1.52.0

Syft A CLI tool and Go library for generating a Software Bill of Materials SBOM from container images and filesystems. Exceptional for vulnerability detection when used with a scanner likeGrype. Features Generates SBOMs for container images , filesystems , archives see the docs for a full list of...

grype v0.119.0

Grype A vulnerability scanner for container images and filesystems. Features Scan container images , filesystems , and SBOMs for known vulnerabilities see the docs for a full list of supported scan targets Supports major OS package ecosystems Alpine, Debian, Ubuntu, RHEL, Oracle Linux, Amazon...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.119.0-0.1.hum1 aarch64, x8664 grype-0.119.0-0.1.hum1.src src...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.118.0-0.2.hum1 aarch64, x8664 grype-0.118.0-0.2.hum1.src src Security Fixes: grype: CVE-2026-88922...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CLEANSTART-2026-EF52160 Security fixes in grype 0.117.0-r1

Package grype version 0.117.0-r1 fixes 3 vulnerabilities: CVE-2026-56864, CVE-2026-56865, CVE-2026-41178...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grype: grype-0.118.0-0.1.hum1 aarch64, x8664 grype-0.118.0-0.1.hum1.src src...

GO-2024-2490 vulnerabilities

Vulnerabilities for packages: wolfictl, kubescape, zarf, syft, grype, k9s...

GO-2024-2948 vulnerabilities

Vulnerabilities for packages: kots, terraform, trivy-fips, tflint, terragrunt, tfsec, trivy, wolfictl, kubescape, zarf, zot, snyk-cli, grype, conftest, k9s, conftest-fips...

GO-2026-4809 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, cg, grype-db, k9s-fips, kubescape-server, kubescape-operator, kubescape-server-fips, wolfictl, kubescape, xeol, xeol-fips, chainctl-fips, zarf, guac, k9s, zarf-fips, syft-fips, chainctl...

GO-2025-4020 vulnerabilities

Vulnerabilities for packages: grype, gotenberg, trufflehog-fips, gitleaks, cg, kots, mattermost-fips, syft, wolfictl, chainctl, filebrowser, k9s-fips, chezmoi, kubescape, mattermost, gptscript, trufflehog, grype-db, undock, zarf, grype-fips, nuclei, k9s, syft-fips...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: buildah, gosu, cadvisor, neuvector-fips, eks-distro-fips, kubernetes-fips, grype, opentelemetry-collector-contrib-fips, grafana-alloy, cluster-autoscaler, opentelemetry-collector-contrib, kubernetes, runc, syft, cadvisor-fips, neuvector, docker, grafana-alloy-fips,...

GO-2024-2491 vulnerabilities

Vulnerabilities for packages: cadvisor, zot, grype, kots, trivy, kubernetes, runc, syft, newrelic-infrastructure-agent, docker, wolfictl, k3s, skopeo, skaffold, ctop, nerdctl, podman, k3d, kubescape, kaniko, buildkitd, zarf, k9s...

GO-2024-2791 vulnerabilities

Vulnerabilities for packages: buildah, ctop, opentelemetry-collector-contrib, cadvisor, kubernetes, cadvisor-fips, grype, neuvector-scanner, wolfictl, opentelemetry-collector-contrib-fips...

GO-2025-3528 vulnerabilities

Vulnerabilities for packages: helm-push, trivy-fips, flux-source-controller-fips, zot, flux-source-controller, kaniko-fips, neuvector-fips, grype, beats, opa, flux-helm-controller, docker-compose, buildkitd-fips, kots, cert-manager-cmctl-fips, docker-compose-fips, flux-helm-controller-fips,...

GO-2025-3922 vulnerabilities

Vulnerabilities for packages: packer-fips, nsc, trivy-fips, trivy-operator-fips, vcluster, zot, vault, prometheus-podman-exporter-fips, tflint, gotenberg, k8s-image-swapper-fips, cloudbeat-fips, gitness, grafana-alloy, kubescape-operator-fips, cg, gitleaks, nsc-fips, k8s-image-swapper,...

GO-2026-5758 vulnerabilities

Vulnerabilities for packages: kubevela-fips, kubescape-operator-fips, cg, helm-operator-fips, kubescape-server, spegel-fips, trivy, cloudbeat, rancher, chainctl, linkerd2, k9s-fips, kubescape, xeol-fips, tigera-operator, zarf-fips, kubevela, consul-k8s-fips, tigera-operator-fips,...