Go/github.com/anchore/grype CVE-2025-65965: high, EPSS 0.15%
Grype has a credential disclosure vulnerability in its JSON output
Action: Upgrade github.com/anchore/grype to 0.104.1 or later.
go get github.com/anchore/grype@v0.104.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.68.0 | 0.104.1 | - |
Fixed versions
| 0.104.1 |
Sources
- osv: GHSA-6gxw-85q2-q646
- https://github.com/anchore/grype/security/advisories/GHSA-6gxw-85q2-q646
- https://nvd.nist.gov/vuln/detail/CVE-2025-65965
- https://github.com/anchore/grype/pull/3068
- https://github.com/anchore/grype/commit/39f7fa17af2739cafe9b27176d4a68f7c05f21c1
- https://github.com/anchore/grype/commit/c99f79de49a58dc16d7fd8f35160b169b87db9de
- https://github.com/anchore/grype
CVE-2025-65965 · published · modified · JSON