Skip to content

Issues: anchore/grype

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
8 Open 17 Closed
8 Open 17 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

grype not reporting issues present in GHSA for System.Data.SqlClient 4.8.5 bug Something isn't working false-negative
#1693 opened Feb 2, 2024 by vishwesh-sharma
5
CVE-2023-44487 not detected even when vulnerable jetty version present bug Something isn't working false-negative
#1568 opened Oct 23, 2023 by jiri-muller
1
Fails to find open kernel CVEs via CPE bug Something isn't working false-negative
#1560 opened Oct 13, 2023 by JustAnotherSwCoderAndTester
3
CVE-2023-4863 not reported for Ubuntu 18 image with libwebp installed bug Something isn't working false-negative
#1559 opened Oct 13, 2023 by sabw8217
1
Grype does not detect CVE-2023-3635 against okio-jvm-3.0.0.jar bug Something isn't working changelog-ignore Don't include this issue in the release changelog false-negative
#1457 opened Aug 24, 2023 by navzen2000
14
Vulnerability not found for read-installed-packages 2.0.1 bug Something isn't working ecosystem:javascript relating to the javascript ecosystem false-negative needs-investigation
#1325 opened May 31, 2023 by meuper
3
Grype doesn't detect CVE-2021-43798 bug Something isn't working false-negative
#534 opened Dec 13, 2021 by awoodobvio
3
Java cataloger reports various packages by the wrong name ecosystem:java relating to the java ecosystem false-negative spike
#192 opened Oct 15, 2020 by pdevine-cb
@wagoodman
4
ProTip! Exclude everything labeled bug with -label:bug.