# Grype - v0.87.0 released

**URL:** <https://anchorecommunity.discourse.group/t/grype-v0-87-0-released/314>\
**Category:** Announcements\
**Tags:** release\
**Created:** [January 22, 2025, 9:08pm UTC](https://anchorecommunity.discourse.group/t/grype-v0-87-0-released/314 "2025-01-22T21:08:16Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![popey](https://yyz2.discourse-cdn.com/free1/user_avatar/anchorecommunity.discourse.group/popey/32/429_2.png) [@popey](https://anchorecommunity.discourse.group/u/popey)\
**Post date:** [January 22, 2025, 9:08pm UTC](https://anchorecommunity.discourse.group/t/grype-v0-87-0-released/314/1 "2025-01-22T21:08:16Z")

</div>

## [Release v0.87.0 · anchore/grype · GitHub](https://github.com/anchore/grype/releases/tag/v0.87.0)

### Added Features

- Custom Vulnerability Sources CSAF [#2337](https://github.com/anchore/grype/issues/2337)
- Add package name to VEX product identifiers [#1905](https://github.com/anchore/grype/issues/1905) [#2355](https://github.com/anchore/grype/pull/2355) [@ferozsalam](https://github.com/ferozsalam)

### Bug Fixes

- fix upstream match for linux-._-headers-._ [#2320](https://github.com/anchore/grype/pull/2320) [@barnuri](https://github.com/barnuri)
- external-sources: throttle requests to maven central to avoid being rate limited for large sets of java dependencies [#2384](https://github.com/anchore/grype/pull/2384) [@rawlingsj](https://github.com/rawlingsj)
- Clean up config help text [#2347](https://github.com/anchore/grype/pull/2347) [@wagoodman](https://github.com/wagoodman)

**[(Full Changelog)](https://github.com/anchore/grype/compare/v0.86.1...v0.87.0)**