Browse CVEs

MEDIUM 5.3 CVE-2026-33481 Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Syft versions before v1… Syft 1.42.3+ Fix from $1,6002026-03-26 MEDIUM 5.5 CVE-2026-31961 Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory allocation vuln… Quill 0.7.1+ Fix from $1,6002026-03-11 MEDIUM 5.3 CVE-2026-31959 Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forgery (SSRF… Quill after 0.7.1 Fix from $1,6002026-03-11 MEDIUM 5.3 CVE-2026-31960 Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP response bodies … Quill 0.7.1+ Fix from $1,6002026-03-11 CRITICAL 9.8 CVE-2024-24579 stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an O… Stereoscope 0.0.1+ Fix from $2,3002024-01-31 HIGH 7.5 CVE-2023-24827 syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. A password disclosure f… Syft Patch available Fix from $1,9502023-02-07 HIGH 7.5 CVE-2022-1766 Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the crede… Anchore 0.1.5 / 4.0.1+ Fix from $1,9502022-07-20 CRITICAL 9.9 CVE-2020-11075 In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in… Engine Patch available Fix from $2,3002020-05-27 MEDIUM 6.5 CVE-2018-1999033 An exposure of sensitive information vulnerability exists in Jenkins Anchore Container Image Scanner Plugin 10.16 and earlier in AnchoreBuilder.java … Container Image Scanner after 1.0.16 Fix from $1,6002018-08-01