Skip to content
OpenAdvisories

Vendor

Anchore

11 known vulnerabilities.

Products

Anchore Enterprise 3 quill 3 syft 2 AnchoreCTL 1 grype 1 stereoscope 1 anchore-engine 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2026-63727

    Anchore Enterprise Privilege Escalation via User Management API

    Anchore Enterprise versions from 5.11.0 to 5.27.1 and 6.0.0 contain an improper privilege escalation vulnerability in the user management API. An authenticated attacker who is able to access the Anchore Enterprise API could issue an API call capable of modify…

    Anchore Anchore Enterprise
  • High 7.3
    CVE-2026-25076

    Anchore Enterprise GraphQL Reports API SQL injection

    Anchore Enterprise versions before 5.25.1 contain an SQL injection vulnerability in the GraphQL Reports API. An authenticated attacker that is able to access the GraphQL API could execute arbitrary SQL instructions resulting in modifications to the data conta…

    Anchore Anchore Enterprise
  • High 8.2
    CVE-2025-65965

    Grype has a credential disclosure vulnerability in Grype JSON output

    Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file…

    Anchore grype zarf k9s Alpine Wolfi Go
  • High 7.7
    CVE-2020-11075

    Shell Escape in Anchore Engine

    In Anchore Engine version 0.7.0, a specially crafted container image manifest, fetched from a registry, can be used to trigger a shell escape flaw in the anchore engine analyzer service during an image analysis process. The image analysis operation can only b…

    Anchore anchore-engine