We identified a recent issue where Grype databases were missing override data from anchore/nvd-data-overrides (~15k records). This was caused by a code change that prevented these records from being included during incremental NVD updates.
The issue has been resolved, and today’s databases now correctly include the override data.
Related issues: