Vulnerabilidades en Anchore
10 resultadosAnálisis Vexday
Anchore registra 2 vulnerabilidades na base Vexday, com 1 divulgação recente (últimos 90 dias), mas nenhuma sob exploração ativa ou classificada como crítica. A fraqueza dominante (CWE-648) aponta para questões de execução de código incorreta, indicando risco moderado que requer atenção mas sem urgência operacional imediata.
CVE-2020-11075HIGHShell Escape in Anchore EngineEPSS 1.8%CVE-2023-24827MEDIUMCredential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syftEPSS 0.8%CVE-2026-33481MEDIUMSyft improper temporary file cleanupEPSS 0.4%CVE-2024-24579MEDIUMTar path traversal in stereoscope when processing OCI tar archivesEPSS 0.4%CVE-2026-25076HIGHAnchore Enterprise GraphQL Reports API SQL injectionEPSS 0.3%CVE-2026-63727HIGHAnchore Enterprise Privilege Escalation via User Management APIEPSS 0.3%CVE-2025-65965HIGHGrype has a credential disclosure vulnerability in Grype JSON outputEPSS 0.1%CVE-2026-31961MEDIUMUnbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsingEPSS 0.1%CVE-2026-31959MEDIUMSSRF in Quill via unvalidated URL from Apple notarization log retrievalEPSS 0.1%CVE-2026-31960MEDIUMDoS in Quill via unbounded read of HTTP response body during notarizationEPSS 0.1%