Skip to content
Anchore vulnerabilities
Newest
-
anchore enterprise
Anchore Enterprise Privilege Escalation via User Management API
CVE-2026-63727
8.7 High
-
anchore syft
Syft improper temporary file cleanup
CVE-2026-33481
Fix available
5.3 Medium
-
anchore enterprise
Anchore Enterprise GraphQL Reports API SQL injection
CVE-2026-25076
8.5 High
-
anchore quill
DoS in Quill via unbounded read of HTTP response body during notarization
CVE-2026-31960
Fix available
5.3 Medium
-
anchore quill
Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing
CVE-2026-31961
Fix available
5.5 Medium
-
anchore quill
SSRF in Quill via unvalidated URL from Apple notarization log retrieval
CVE-2026-31959
Fix available
5.3 Medium
-
anchore quill
Quill 2.0.3 - Lack of data validation in HTML export allowing XSS
CVE-2025-15056
5.1 Medium
-
anchore grype
Grype has a credential disclosure vulnerability in Grype JSON output
CVE-2025-65965
Fix available
8.2 High
-
anchore stereoscope
Tar path traversal in stereoscope when processing OCI tar archives
CVE-2024-24579
Fix available
5.3 Medium
-
anchore syft
Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft
CVE-2023-24827
Fix available
6.5 Medium
-
anchore, anchore enterprise, anchorectl +2 more
Anchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the…
CVE-2022-1766
7.5 High
-
anchore engine, anchore-engine +1 more
Shell Escape in Anchore Engine
CVE-2020-11075
7.7 High
-
anchore container image scanner
Exposure of sensitive information in Anchore Container Image Scanner Jenkins Plugin
CVE-2018-1999033
Fix available
6.5 Medium