# Grype on-screen vulnerability count differs from the text file output count

**URL:** <https://anchorecommunity.discourse.group/t/grype-on-screen-vulnerability-count-differs-from-the-text-file-output-count/522>\
**Category:** General\
**Created:** [August 4, 2025, 4:25pm UTC](https://anchorecommunity.discourse.group/t/grype-on-screen-vulnerability-count-differs-from-the-text-file-output-count/522 "2025-08-04T16:25:19Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![BarryD](https://avatars.discourse-cdn.com/v4/letter/b/edb3f5/32.png) [@BarryD](https://anchorecommunity.discourse.group/u/BarryD)\
**Post date:** [August 4, 2025, 4:25pm UTC](https://anchorecommunity.discourse.group/t/grype-on-screen-vulnerability-count-differs-from-the-text-file-output-count/522/1 "2025-08-04T16:25:19Z")

</div>

Why is the grype on-screen vulnerability count different from the text file output count. For example, when I scanned my code the on-screen output said “Scanned for vulnerabilities [11 vulnerability matches] “ However, the “-o table” text file only listed 5 vulnerabilities.

Command line used: grype sbom:\_syftjson.json -o table \> GrypeOut\_20250716.txt

Grype version: 0.95.0

---

<div class="post-metadata">

**Author:** ![kzantow](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/kzantow/32/17_2.png) [@kzantow](https://anchorecommunity.discourse.group/u/kzantow)\
**Post date:** [August 5, 2025, 5:28pm UTC](https://anchorecommunity.discourse.group/t/grype-on-screen-vulnerability-count-differs-from-the-text-file-output-count/522/2 "2025-08-05T17:28:11Z")

</div>

Hi @BarryD,

The table view [deduplicates rows](https://github.com/anchore/grype/blob/77f8c668d94802d6d589aa515553ea6351a3a18a/grype/presenter/table/presenter.go#L412). If you have any examples to reproduce the behavior, it may be easier to understand exactly what’s going on.

---

<div class="post-metadata">

**Author:** ![lifosiyo](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/lifosiyo/32/507_2.png) [@lifosiyo](https://anchorecommunity.discourse.group/u/lifosiyo)\
**Post date:** [October 26, 2026, 7:59pm UTC](https://anchorecommunity.discourse.group/t/grype-on-screen-vulnerability-count-differs-from-the-text-file-output-count/522/3 "2026-10-26T19:59:04Z")

</div>

The two counts aren’t directly comparable: the table deduplicates rows, while the summary counts vulnerability matches. Try `-o json` and inspect the `matches` array to see the individual records.