anchore

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

anchore records in CISA KEV

No anchore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Syft · all components

TI-2023-10327 CVE-2023-24827 · GHSA-jp7v-3587-2956

HIGH 66

syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00791 Published 2023-02-07 Fixed in 0.70.0 CWE-200

TI-2026-25877 CVE-2026-33481 · GHSA-rjcw-vg7j-m9rc

LOW 30

Syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00423 Published 2026-03-26 Fixed in 1.42.3 CWE-460