VDB
GO-2025-4160
GO-2025-4160
PUBLISHED
Grype has a credential disclosure vulnerability in its JSON output in github.com/anchore/grype
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | zarf | 0, 0, 0 |
| wolfi | k9s | 0, 0, 0 |
| wolfi | zarf | 0, 0, 0 |
| chainguard | chainctl | 0, 0, 0 |
| chainguard | k9s | 0, 0, 0 |
| github.com | anchore/grype | 0.68.0, 0.68.0 |
| chainguard | cg | 0, 0, 0 |
Timeline
- Nov 25, 2025 CVE Published
- Feb 4, 2026 CVE Updated