Search results

False positive CVE-2026-2603 — keycloak-server-spi-private 26.2.14 flagged but Red Hat backported the fix

bugSomething isn't workingSomething isn't working

Status: Open.

#3392 In anchore/grype;

· etarast opened on Apr 23, 2026

False positive CVE-2026-26308, CVE-2026-26309, CVE-2026-26310, CVE-2026-26311, CVE-2026-26330 — Istio Envoy proxy -dev suffix treated as semver pre-release

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3390 In anchore/grype;

· sekveaja opened on Apr 22, 2026

Grype does not detect Chiselled Ubuntu images

enhancementNew feature or requestNew feature or request

Status: Open.

#3389 In anchore/grype;

· rajesh-payyappilly opened on Apr 22, 2026

Import metadata digest is not in the expected format

bugSomething isn't workingSomething isn't working

Status: Open.

#3388 In anchore/grype;

· Hari21225 opened on Apr 22, 2026

CycloneDX SBOM file not recognized

blockedProgress is being stopped by somethingProgress is being stopped by something

bugSomething isn't workingSomething isn't working

Status: Open.

#3373 In anchore/grype;

· kninxx opened on Apr 17, 2026

Schema v7 Wish List

Status: Open.

#3369 In anchore/grype;

· wagoodman opened on Apr 15, 2026

Expand ignore rules to owned sub packages of distro packages

enhancementNew feature or requestNew feature or request

Status: Open.

#3368 In anchore/grype;

· willmurphyscode opened on Apr 14, 2026

False Positive: CVE-2026-27205 Flask and CVE-2024-34069 Werkzeug coming from Python ecosystem

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3354 In anchore/grype;

· etarast opened on Apr 7, 2026

Option to choose CycloneDX Json output spec version

enhancementNew feature or requestNew feature or request

Status: Open.

#3350 In anchore/grype;

· nicoskiy opened on Apr 3, 2026

Proposal: zarf package scan target

enhancementNew feature or requestNew feature or request

multiple-sourcesIssues that are dependent on supporting multiple sourcesIssues that are dependent on supporting multiple sources

needs-investigation

needs-proposalShould be done but needs proposal/design for further discussionShould be done but needs proposal/design for further discussion

Status: Open.

#3329 In anchore/grype;

· brandtkeller opened on Mar 31, 2026

--only-fixed seems not to work with python

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3312 In anchore/grype;

· ruben-herold opened on Mar 25, 2026

Proposal: Support OCI image as the primary vulnerable software entity (Image-as-a-Product)

enhancementNew feature or requestNew feature or request

needs-discussion

Status: Open.

#3302 In anchore/grype;

· willmurphyscode opened on Mar 20, 2026