Search results

how grype handles false positives

Status: Open.

#3126 In anchore/grype;

· rezmoss opened on Dec 18, 2025

False Positive: JRuby CVE-2011-4838, CVE-2012-5370, CVE-2010-1330 in SLES 15 SP16

bugSomething isn't workingSomething isn't working

Status: Open.

#3120 In anchore/grype;

· sekveaja opened on Dec 15, 2025

Grype doesn't interpret Ubuntu LTS versioning correclty

bugSomething isn't workingSomething isn't working

Status: Open.

#3119 In anchore/grype;

· ibahnasy opened on Dec 15, 2025

False positive: GHSA-5xr6-xhww-33m4 reported for GitHub Action using commit hash despite being fixed version

enhancementNew feature or requestNew feature or request

Status: Open.

#3109 In anchore/grype;

· IdanYaffe opened on Dec 12, 2025

Cannot detect all CVEs of Qt6

bugSomething isn't workingSomething isn't working

Status: Open.

#3108 In anchore/grype;

· misery opened on Dec 12, 2025

received unknown tag ExternalDocumentRef in CreationInfo section

blockedProgress is being stopped by somethingProgress is being stopped by something

bugSomething isn't workingSomething isn't working

Status: Open.

#3107 In anchore/grype;

· misery opened on Dec 11, 2025

Add Runtime Warnings When TLS Verification Is Disabled or HTTP Is Enabled

bugSomething isn't workingSomething isn't working

Status: Open.

#3101 In anchore/grype;

· Tanish-26 opened on Dec 8, 2025

False Negative: CVE-2025-11579 / GHSA-rwvp-r38j-9rgg / GO-2025-4020

bugSomething isn't workingSomething isn't working

false-positive

Status: Open.

#3095 In anchore/grype;

· joonas opened on Dec 5, 2025

Error scanning directory on v0.104.1

bugSomething isn't workingSomething isn't working

Status: Open.

#3093 In anchore/grype;

· noahbailey opened on Dec 5, 2025

Not identifying libraires impacted by shai-hulud-2 libraries

bugSomething isn't workingSomething isn't working

false-negative

needs-discussion

Status: Open.

#3085 In anchore/grype;

· rbalak opened on Dec 2, 2025

False Positive: GHSA-248v-346w-9cwc (CVE-2024-39689) certifi coming from Python ecosystem

bugSomething isn't workingSomething isn't working

package-overlapIssues where two packages, e.g. a pypi package and an RPM, own overlapping filesIssues where two packages, e.g. a pypi package and an RPM, own overlapping files

Status: Open.

#3083 In anchore/grype;

· etarast opened on Dec 2, 2025

False positive for CVE-2025-30258 (gnupg)

bugSomething isn't workingSomething isn't working

Status: Open.

#3078 In anchore/grype;

· lazka opened on Nov 28, 2025