Credential Disclosure

🗓️ 03 Dec 2025 00:49:30Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Grype leaks credentials from output files due to improper sanitization in file or json output.

Reporter	Title	Published	Views	Family All 32
AlpineLinux	CVE-2025-65965	25 Nov 202519:36	–	alpinelinux
Chainguard	CVE-2025-65965 vulnerabilities	28 Nov 202513:26	–	cgr
CNNVD	grype 安全漏洞	25 Nov 202500:00	–	cnnvd
CVE	CVE-2025-65965	25 Nov 202519:36	–	cve
Cvelist	CVE-2025-65965 Grype has a credential disclosure vulnerability in Grype JSON output	25 Nov 202519:36	–	cvelist
EUVD	EUVD-2025-199596	25 Nov 202519:36	–	euvd
Fedora	[SECURITY] Fedora 43 Update: k9s-0.50.18-1.fc43	8 Feb 202601:12	–	fedora
Fedora	[SECURITY] Fedora 42 Update: k9s-0.50.18-1.fc42	9 Mar 202601:02	–	fedora
Tenable Nessus	Fedora 43 : k9s (2026-847455954a)	7 Feb 202600:00	–	nessus
Tenable Nessus	Fedora 42 : k9s (2026-a74aa25180)	9 Mar 202600:00	–	nessus

Vulners

Node

anchore grypeMatch0.50.1-r0go

AND

anchore grypeMatch0.87.0-r1go

AND

anchore grypeMatch0.87.0-r2go

AND

anchore grypeMatch0.61.0-r0go

AND

anchore grypeMatch0.83.0-r0go

AND

anchore grypeMatch0.35.0-r0go

AND

anchore grypeMatch0.72.0-r0go

AND

anchore grypeMatch0.77.4-r1go

AND

anchore grypeMatch0.95.0-r1go

AND

anchore grypeMatch0.65.0-r0go

AND

anchore grypeMatch0.61.1-r0go

AND

anchore grypeMatch0.73.4-r0go

AND

anchore grypeMatch0.86.0-r0go

AND

anchore grypeMatch0.56.0-r1go

AND

anchore grypeMatch0.63.0-r0go

AND

anchore grypeMatch0.51.0-r0go

AND

anchore grypeMatch0.92.0-r0go

AND

anchore grypeMatch0.82.0-r0go

AND

anchore grypeMatch0.73.3-r0go

AND

anchore grypeMatch0.50.2-r0go

AND

anchore grypeMatch0.64.2-r0go

AND

anchore grypeMatch0.74.6-r0go

AND

anchore grypeMatch0.48.0-r0go

AND

anchore grypeMatch0.64.1-r0go

AND

anchore grypeMatch0.62.2-r0go

AND

anchore grypeMatch0.57.1-r0go

AND

anchore grypeMatch0.63.1-r0go

AND

anchore grypeMatch0.77.4-r0go

AND

anchore grypeMatch0.34.7-r0go

AND

anchore grypeMatch0.32.0-r0go

AND

anchore grypeMatch0.37.0-r0go

AND

anchore grypeMatch0.103.0-r0go

AND

anchore grypeMatch0.60.0-r1go

AND

anchore grypeMatch0.39.0-r0go

AND

anchore grypeMatch0.97.0-r0go

AND

anchore grypeMatch0.74.7-r1go

AND

anchore grypeMatch0.34.3-r0go

AND

anchore grypeMatch0.40.0-r1go

AND

anchore grypeMatch0.54.0-r0go

AND

anchore grypeMatch0.100.0-r1go

AND

anchore grypeMatch0.44.0-r0go

AND

anchore grypeMatch0.99.1-r0go

AND

anchore grypeMatch0.56.0-r0go

AND

anchore grypeMatch0.33.0-r0go

AND

anchore grypeMatch0.65.2-r1go

AND

anchore grypeMatch0.74.7-r0go

AND

anchore grypeMatch0.38.0-r0go

AND

anchore grypeMatch0.65.2-r0go

AND

anchore grypeMatch0.79.2-r0go

AND

anchore grypeMatch0.87.0-r3go

AND

anchore grypeMatch0.62.3-r0go

AND

anchore grypeMatch0.64.0-r0go

AND

anchore grypeMatch0.74.2-r0go

AND

anchore grypeMatch0.97.1-r0go

AND

anchore grypeMatch0.80.0-r0go

AND

anchore grypeMatch0.87.0-r0go

AND

anchore grypeMatch0.80.1-r0go

AND

anchore grypeMatch0.65.1-r0go

AND

anchore grypeMatch0.41.0-r0go

AND

anchore grypeMatch0.74.7-r2go

AND

anchore grypeMatch0.98.0-r0go

AND

anchore grypeMatch0.46.0-r0go

AND

anchore grypeMatch0.84.0-r0go

AND

anchore grypeMatch0.71.0-r0go

AND

anchore grypeMatch0.59.1-r0go

AND

anchore grypeMatch0.77.4-r2go

AND

anchore grypeMatch0.95.0-r0go

AND

anchore grypeMatch0.86.1-r0go

AND

anchore grypeMatch0.55.0-r0go

AND

anchore grypeMatch0.42.0-r0go

AND

anchore grypeMatch0.69.1-r0go

AND

anchore grypeMatch0.96.1-r0go

AND

anchore grypeMatch0.53.1-r1go

AND

anchore grypeMatch0.82.2-r0go

AND

anchore grypeMatch0.36.1-r0go

AND

anchore grypeMatch0.53.1-r0go

AND

anchore grypeMatch0.60.0-r0go

AND

anchore grypeMatch0.33.1-r0go

AND

anchore grypeMatch0.34.3-r1go

AND

anchore grypeMatch0.59.0-r0go

AND

anchore grypeMatch0.40.1-r0go

AND

anchore grypeMatch0.50.2-r1go

AND

anchore grypeMatch0.36.0-r0go

AND

anchore grypeMatch0.49.0-r0go

AND

anchore grypeMatch0.42.0-r1go

AND

anchore grypeMatch0.97.1-r1go

AND

anchore grypeMatch0.61.1-r1go

AND

anchore grypeMatch0.31.1-r0go

AND

anchore grypeMatch0.69.0-r0go

AND

anchore grypeMatch0.100.0-r0go

AND

anchore grypeMatch0.66.0-r0go

AND

anchore grypeMatch0.47.0-r0go

AND

anchore grypeMatch0.52.0-r0go

AND

alpinelinux alpine_linuxMatchedge

anchore github.com/anchore/grypeRangev0.68.0–0.68.0go

Source	Link
secdb	www.secdb.alpinelinux.org/edge/community.yaml
github	www.github.com/anchore/grype/pull/3068
github	www.github.com/anchore/grype/commit/39f7fa17af2739cafe9b27176d4a68f7c05f21c1
github	www.github.com/anchore/grype/security/advisories/GHSA-6gxw-85q2-q646

08 May 2026 13:13Current

5.8Medium risk

Vulners AI Score5.8

CVSS 48.2

EPSS0.00021

SSVC