syft vulnerabilities

1 known vulnerability in syft from Anchore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  syft: Insertion of Sensitive Information into Log File

  CVE-2023-24827Feb 7, 2023Anchore

  syft is a a CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems. A password disclosure flaw was found in Syft versions v0.69.0 and v0.69.1. This flaw leaks the password stored in the SYFT_ATTEST_PASS