Help shape the future of Grype! Share your thoughts in our quick 5-question survey. Your feedback will guide our development priorities and help us better serve your needs. Thank you!
Release Notes:
Version v0.91.1
Bug Fixes
- Assume that empty versions should match on all possible versions #2591 @wagoodman
- Fix severity field in
db search vuln
#2589 @wagoodman - Recover from panic within a matcher #2590 @wagoodman
- Should only check maven central if pom info is missing #2216 #2547 @tdunlap607
- grype db search GHSA-mrrh-fwg8-r2c3 doesn’t return results #2530
- Grype stopped reporting vulnerabilities after upgrade #2608 #2610 @willmurphyscode
- Grype does not handle cache-dir containing ~ correctly #2599 #2600 @kzantow
- Grype should expand
~
in paths in config file #2024 #2600 @kzantow - False Positive: Multiple old CVEs in chromium 134.0.6998.117 for apk ecosystem #2581]
- Missing grype DB update from 20250411 #2593
- Does not fill in the Level field of the SARIF result object #2511 #2571 @bdovaz