Sek

**What happened**: Scan on image that has python3-future-0.18.2-150300.3.3.1.noarch installed. It generates high vulnerability: NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY future 0.18.2 0.18.3 python GHSA-v3c5-jqr6-7qm8 High JSON format: --------------- "vulnerability": {...

**What happened**: Scan on image that has python3-wheel-0.32.3-150100.6.5.1.noarch installed. It generates high vulnerability: NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY wheel 0.32.3 0.38.1 python GHSA-qwmp-2cf2-g9g6 High JSON format: ========= "vulnerability": {...

**What happened**: Scan on image that has python3-protobuf-3.9.2-150200.4.21.1.x86_64 installed. It generates high vulnerability: $ grype --distro sles15.5 suse15.5_python3-protobuf:v1 NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY protobuf 3.9.2 3.18.3 python GHSA-8gq9-2x98-w8hf High...

**What happened**: Scan on image that has ruby2.5-stdlib-2.5.9-150000.4.29.1.x86_64 installed. It generates high vulnerability: "vulnerability": { "id": "**GHSA-ggxm-pgc9-g7fp**", "dataSource": "https://github.com/advisories/GHSA-ggxm-pgc9-g7fp", "namespace": "github:language:ruby", "severity": "High", "urls": [ "https://github.com/advisories/GHSA-ggxm-pgc9-g7fp" ], : : "relatedVulnerabilities":...

**What happened**: Scan on image that has python3-urllib3-1.25.10-150300.4.9.1.noarch installed. It generates high vulnerability: $ grype --distro sles15.5 suse15.5_python3-urllib3:v1 urllib3 1.25.10 1.26.5 python GHSA-q2q7-5pp4-w6pg High urllib3 1.25.10 1.26.17 python GHSA-v845-jxx5-vc9f Medium...

Generate automount error when naming configuration file with 3 dash (---)

1

##### ISSUE TYPE - [ ] Bug Report 1) We observe that naming with 3 dash (---) or plus for the configuration name in the yaml file, it generates error....

False Positive: GHSA-jfmj-5v4g-7637 (CVE-2024-5569) python3-zipp due to Syft noise and mismatch of package name

1

**What happened**: Scan on image that has python3-zipp-0.6.0-150100.3.5.1.noarch installed. It generates vulnerabilities: NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY zipp 0.6.0 3.19.1 python GHSA-jfmj-5v4g-7637 Medium **What you expected to happen**: There...

**What happened**: Scan on image that has python3-pycryptodome-3.9.0-150200.9.1.x86_64 installed. It generates high vulnerability: NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY pycryptodome 3.9.0 3.19.1 python GHSA-j225-cvw7-qrx7 Medium **What you expected to happen**:...

False positive: GHSA-g3rq-g295-4j3m (CVE-2020-28493) python3-Jinja2 in SLES 15.5 Ecosystem

4

**What happened**: Scan on image that has python3-Jinja2-2.10.1-3.10.2.noarch installed. It generates vulnerabilities: NAME INSTALLED FIXED-IN TYPE VULNERABILITY SEVERITY Jinja2 2.10.1 3.1.4 python GHSA-h75v-3vvj-5mfj Medium Jinja2 2.10.1 3.1.3 python GHSA-h5c8-rqwp-cp95 Medium...

False Positive: CVE-2005-2945, CVE-2005-2992

2

**What happened**: Issue with  "package_cpe23": "cpe:2.3:a:quarkus:arc:2.7.6.Final-nordix-1:*:*:*:*:*:*:*", But Grype reported to version 5.21j  which is not the same package  cpe:2.3:a:arc:arc:*:*:*:*:*:*:*:*  quarkus:arc is not arc:arc **Environment**: Anchore Grype version: 0.56.0 OS type...