Go/github.com/anchore/syft CVE-2026-33481: medium 5.3, EPSS 0.53%
Syft improper temporary file cleanup
Action: Upgrade github.com/anchore/syft to 1.42.3 or later.
go get github.com/anchore/syft@v1.42.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.42.3 | - |
Fixed versions
| 1.42.3 |
Sources
- osv: GHSA-rjcw-vg7j-m9rc
- https://github.com/anchore/syft/security/advisories/GHSA-rjcw-vg7j-m9rc
- https://nvd.nist.gov/vuln/detail/CVE-2026-33481
- https://github.com/anchore/stereoscope/pull/537
- https://github.com/anchore/syft/pull/4629
- https://github.com/anchore/syft/pull/4668
- https://github.com/anchore/syft
CVE-2026-33481 · published · modified · JSON