github.com/anchore/syft vulnerabilities (Go)

2 vulnerabilities.

• github.com/anchore/syft Go Syft improper temporary file cleanup CVE-2026-33481 Fix available 5.3 MediumMarch 20, 2026
• github.com/anchore/syft Go Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft CVE-2023-24827 Fix available 6.5 MediumFebruary 7, 2023