Go/github.com/anchore/grype CVE-2025-65965: high 8.2, EPSS 0.16%
Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype
Action: Upgrade github.com/anchore/grype to 0.104.1 or later.
go get github.com/anchore/grype@v0.104.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.68.0 | 0.104.1 | - |
Fixed versions
| 0.104.1 |
Sources
- osv: GO-2025-4160
- nvd: CVE-2025-65965
- https://github.com/anchore/grype/security/advisories/GHSA-6gxw-85q2-q646
- https://github.com/anchore/grype/commit/c99f79de49a58dc16d7fd8f35160b169b87db9de
- https://github.com/anchore/grype/pull/3068
CVE-2025-65965 · published · modified · JSON