Skip to content
OpenAdvisories

Package · Go

github.com/anchore/syft

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2026-33481

    Syft improper temporary file cleanup

    Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. Syft versions before v1.42.3 would not properly cleanup temporary storage if the temporary storage was exhausted during a scan. When …

    Anchore syft github.com/anchore/syft Go
  • Medium 6.5
    CVE-2023-24827

    Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft

    syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFT_ATTEST_PAS…

    Anchore syft github.com/anchore/syft Go