# Cvss4 vs cvss3 and issues downloading grype db

**URL:** <https://anchorecommunity.discourse.group/t/cvss4-vs-cvss3-and-issues-downloading-grype-db/398>\
**Category:** Grype\
**Created:** [April 7, 2025, 12:25pm UTC](https://anchorecommunity.discourse.group/t/cvss4-vs-cvss3-and-issues-downloading-grype-db/398 "2025-04-07T12:25:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![TimBrown1611](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/timbrown1611/32/223_2.png) [@TimBrown1611](https://anchorecommunity.discourse.group/u/TimBrown1611)\
**Post date:** [April 7, 2025, 12:25pm UTC](https://anchorecommunity.discourse.group/t/cvss4-vs-cvss3-and-issues-downloading-grype-db/398/1 "2025-04-07T12:25:44Z")

</div>

hi!  
how can i know if a CVE has only cvss 4 (and not cvss 3)  
is it possible?

moreover, i recently have issues downloading the db manually. when i run grype db list and after that try to download the url i receive 404

thanks!