Attributed metadata history
Up to 100 retained publisher events per page for a41cab85df02a5677c79181f406caadf520bf7569d624d40e2eff59d800c693b. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_8553b983e6ea84b364
observed · 2026-10-12 12:17:08 UTC
available
Fingerprint: 23089fa254a99cce01a3e16b8096578103a202ed2e640f9f3939b0adbb918266
intelligence_src_8553b983e6ea84b364
observed · 2026-10-12 12:17:08 UTC
Added Features emit golang.org/x/net vulns from govlundb [PR #3534 @willmurphyscode] Merge Go vuln matches with GHSA matches [Issue #3515] Bug Fixes only emit records for stdlib [PR #3527 @willmurphyscode] mark hummingbird distro as rolling [PR #3521 @willmurphyscode] disable go stdlib CPE matching by default [PR #3517 @willmurphyscode] merge in custom ranges when applicable [PR #3514 @willmurphyscode] exclude linux-kbuild deb indirect matches by default [PR #3506 @westonsteimel] avoid panic on invalid RHEL version IDs [PR #3490 @jspilman] Support reading CycloneDX 1.7 SBOMs [Issue #3373] Grype cannot read mariadb version correctly [Issue #3452] grype hangs when downloading certain images using registry client [Issue #3492] Can we get a fix for these Critical findings reported for grype [Issue #3484] Additional Changes Security: bump golang.org/x/crypto to v0.52.0 to resolve multiple CVEs [Issue #3493] Security: bump golang.org/x/net to v0.55.0 to resolve CVEs [Issue #3494] Dependencies 35 dependency changes (31 updated, 3 added, 1 removed). 5 vulnerabilities remediated. 🟢 Remediated (5) GHSA-33vj-92qq-66hc (High) — github.com/containerd/containerd/v2 GHSA-cvxm-645q-p57
Fingerprint: 2a7a653128f2f5009c65176d0afc99a4e4adaf5c555f61685c43235e58b91a4f