v0.55.8

Try our Chrome extension

Chrome store icon Chrome Webstore

Easily add the current web-page from your browser directly into your changedetection.io tool, more great features coming soon!

Changedetection.io needs your support!

You can help us by supporting changedetection.io on these platforms;

The more popular changedetection.io is, the more time we can dedicate to adding amazing features!

Many thanks :)

changedetection.io team

  • Cannot set language without session cookie
Aún no hace unos segundos.
            False
        
Aún no hace unos segundos
Captura de pantalla con error actual de la solicitud más reciente
    Skip to content

      Navigation Menu

            Sign in Appearance settings
                * Platform
                        + AI CODE CREATION
                            o GitHub Copilot Write better code with AI
                            o GitHub Copilot app Direct agents from issue to merge
                            o MCP Registry Integrate external tools
                        + DEVELOPER WORKFLOWS
                            o Actions Automate any workflow
                            o Codespaces Instant dev environments
                            o Issues Plan and track work
                            o Code Review Manage code changes
                            o Code Quality Enforce quality at merge
                        + APPLICATION SECURITY
                            o GitHub Advanced Security Find and fix vulnerabilities
                            o Code security Secure your code as you build
                            o Secret protection Stop leaks before they start
                        + EXPLORE
                            o Why GitHub
                            o Documentation
                            o Blog
                            o Changelog
                            o Marketplace
                      View all features
                * Solutions
                        + BY COMPANY SIZE
                            o Enterprises
                            o Small and medium teams
                            o Startups
                            o Nonprofits
                        + BY USE CASE
                            o App Modernization
                            o DevSecOps
                            o DevOps
                            o CI/CD
                            o View all use cases
                        + BY INDUSTRY
                            o Healthcare
                            o Financial services
                            o Manufacturing
                            o Government
                            o View all industries
                      View all solutions
                * Resources
                        + EXPLORE BY TOPIC
                            o AI
                            o Software Development
                            o DevOps
                            o Security
                            o View all topics
                        + EXPLORE BY TYPE
                            o Customer stories
                            o Events & webinars
                            o Ebooks & reports
                            o Business insights
                            o GitHub Skills
                        + SUPPORT & SERVICES
                            o Documentation
                            o Customer support
                            o Community forum
                            o Trust center
                            o Partners
                      View all resources
                * Open Source
                        + COMMUNITY
                            o GitHub Sponsors Fund open source developers
                        + PROGRAMS
                            o Security Lab
                            o Maintainer Community
                            o Accelerator
                            o GitHub Stars
                            o Archive Program
                        + REPOSITORIES
                            o Topics
                            o Trending
                            o Collections
                * Enterprise
                        + ENTERPRISE SOLUTIONS
                            o Enterprise platform AI-powered developer platform
                        + AVAILABLE ADD-ONS
                            o GitHub Advanced Security Enterprise-grade security features
                            o Copilot for Business Enterprise-grade AI features
                            o Premium Support Enterprise-grade 24/7 support
              * Pricing
                Type / to search
                Sign in
              Sign up Appearance settings
      You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert

              Uh oh!

              There was an error while loading. Please reload this page.

              anchore / grype Public
              * Notifications You must be signed in to change notification settings
              * Fork 857
                * Star 12.7k
          * Code
          * Issues 329
          * Pull requests 76
          * Pull requests 77
          * Actions
          * Projects
          * Security and quality 1
          * Insights
          Additional navigation options
                  * Code
                  * Issues
                  * Pull requests
                  * Actions
                  * Projects
                  * Security and quality
                  * Insights

        Releases: anchore/grype

              Releases Tags
            Releases · anchore/grype

                Release list

                    * v0.116.1
                    * v0.116.0
                    * v0.115.0
                    * v0.114.0
                    * v0.113.0
                    * v0.112.0
                    * v0.111.1
                    * v0.111.0
                    * v0.110.0
                    * v0.109.1
                    Previous Next
                Jump to release
                        * v0.116.1
                        * v0.116.0
                        * v0.115.0
                        * v0.114.0
                        * v0.113.0
                        * v0.112.0
                        * v0.111.1
                        * v0.111.0
                        * v0.110.0
                        * v0.109.1
                    Previous Next

                v0.116.1

                              v0.116.1 Latest
                              Latest
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 28 Jul 21:45
                              Immutable release. Only release title and notes can be modified.
                              v0.116.1
                              30394f1
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Bug Fixes

                            * Ensure channel parsing is consistent [PR #3603 @wagoodman]
                            * Scope Go GHSA twins by shared CVE [PR #3592 @wagoodman]
                            * do not cache a comparator that failed to build [PR #3567 @arpitjain099]
                            * Add fix date to rhel minor records created from rhsa [PR #3585 @wagoodman]
                            * grype reporting CVE-64091 as critical - redhat says it is not affected [Issue #3591]
                            * panic: index out of range in distro.parseVersion for VERSION_ID=v [Issue #3588] [PR #3589 @matiasinsaurralde]
                            * False Positive: GO-2026-5932 [Issue #3573]

                          Dependencies

                          30 dependency changes (30 updated). 1 vulnerability remediated.

                          🟢 Remediated (1)

                            * GHSA-hrxh-6v49-42gf (High) — google.golang.org/grpc
                          Updated (30 packages)
                            * github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 → v1.32.0
                            * github.com/anchore/stereoscope v0.2.2 → v0.3.0
                            * github.com/anchore/syft v1.48.0 → v1.50.0
                            * github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58
                            * github.com/containerd/containerd/v2 v2.3.2 → v2.3.3
                            * github.com/docker/cli v29.5.3+incompatible → v29.6.1+incompatible
                            * github.com/envoyproxy/go-control-plane/envoy v1.36.0 → v1.37.0
                            * github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3
                            * github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23
                            * github.com/gpustack/gguf-parser-go v0.24.1 → v0.25.0
                            * github.com/moby/moby/api v1.54.2 → v1.55.0
                            * github.com/moby/moby/client v0.4.1 → v0.5.0
                            * github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
                            * go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.43.0
                            * golang.org/x/crypto v0.53.0 → v0.54.0
                            * golang.org/x/mod v0.37.0 → v0.38.0
                            * golang.org/x/net v0.56.0 → v0.57.0
                            * golang.org/x/sync v0.21.0 → v0.22.0
                            * golang.org/x/sys v0.46.0 → v0.47.0
                            * golang.org/x/term v0.44.0 → v0.45.0
                            * golang.org/x/text v0.39.0 → v0.40.0
                            * golang.org/x/tools v0.47.0 → v0.48.0
                            * google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 → v0.0.0-afd174a
                            * google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → v0.0.0-afd174a
                            * google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)
                            * modernc.org/cc/v4 v4.28.4 → v4.29.0
                            * modernc.org/ccgo/v4 v4.34.4 → v4.34.6
                            * modernc.org/gc/v3 v3.1.3 → v3.1.4
                            * modernc.org/libc v1.73.4 → v1.74.1
                            * modernc.org/sqlite v1.53.0 → v1.54.0

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            matiasinsaurralde, wagoodman, and arpitjain099
                          Assets 21
                                  * grype_0.116.1_checksums.txt
                                      sha256:38ffeb0fbdf1955e46ebfb3cb7369b78888168954a77df02985c0c06505f85e9
                                    1.43 KB 2026-07-28T21:45:13Z
                                  * grype_0.116.1_checksums.txt.pem
                                      sha256:82116dac6f1c9452f10693ce19c5546b6377a04b71d1ac6cfe3d01679370d44b
                                    3.23 KB 2026-07-28T21:45:14Z
                                  * grype_0.116.1_checksums.txt.sig
                                      sha256:75f2a1aae3f2a1225a7c83bae02e807a91747af67ddb3d41642a72d3da587d68
                                    96 Bytes 2026-07-28T21:45:13Z
                                  * grype_0.116.1_darwin_amd64.tar.gz
                                      sha256:e5ff3adac317511876de7863598587a7dbab0c47c8e150368b7df06909c11f4e
                                    29.8 MB 2026-07-28T21:45:09Z
                                  * grype_0.116.1_darwin_arm64.tar.gz
                                      sha256:f493f169cbaae48bade169532b20235fc16653d2a044a5bc6fe6f69a3923f975
                                    27.3 MB 2026-07-28T21:45:09Z
                                  * grype_0.116.1_linux_amd64.deb
                                      sha256:f005c69c326fb27ef5e2c15bca3c6c50fa69dc12e36b01b637b3733746da4fca
                                    28.5 MB 2026-07-28T21:45:13Z
                                  * grype_0.116.1_linux_amd64.rpm
                                      sha256:b4e4a646500d4ca14f5cb32f26f04df0c358af153290800764b4244469862733
                                    28.5 MB 2026-07-28T21:45:11Z
                                  * grype_0.116.1_linux_amd64.tar.gz
                                      sha256:0122df7b655981abe547ad3d2190d65551dac6a2bfc80b4dc2a989b5d0587458
                                    28.5 MB 2026-07-28T21:45:08Z
                                  * grype_0.116.1_linux_arm64.deb
                                      sha256:05d0e69220d70b331e103c6b8f4ac43a538215686890453ee96ac1caa6b37731
                                    26 MB 2026-07-28T21:45:12Z
                                  * grype_0.116.1_linux_arm64.rpm
                                      sha256:26b43cdf87f6051ae78621df831295987fb32eff82d9bc88b2a7cbe8dfe9ca59
                                    25.9 MB 2026-07-28T21:45:10Z
                                  * Source code (zip)
                                    2026-07-28T21:39:05Z
                                  * Source code (tar.gz)
                                    2026-07-28T21:39:05Z
                                  * Release attestation (json)
                                    2026-07-28T21:39:05Z
                                  * Show all 21 assets Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.116.0

                              v0.116.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 16 Jul 16:52
                              Immutable release. Only release title and notes can be modified.
                              v0.116.0
                              3b014b0
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * duplicate RHSAs to all applicable RHEL minor versions [PR #3542 @willmurphyscode]
                            * add chainguard osv transformer [PR #3474 @crosleyzack]
                            * populate package architecture for matching [PR #3504 @willmurphyscode]
                            * lightweight reachability analysis to reduce Golang false positives [Issue #2960] [PR #3509 @spiffcs]
                            * Deduplicate Go matches that are aliases of each other (same CVE reported under both a govulndb GO-* ID and its GHSA) [Issue #3511] [PR #3509 @spiffcs]
                            * Support Ubuntu ESM [Issue #3544] [PR #3546 @wagoodman]

                          Bug Fixes

                            * regenerate v6.1.8 blob and sql schemas [PR #3574 @spiffcs]
                            * rhel version streams [PR #3572 @kzantow]
                            * Grype doesn't match u-boot in SBOM if type is set to firmware [Issue #2537]
                            * Ignore Go compiler affecting CVE when Docker image only contains a binary compiled with Go [Issue #1782]
                            * Zarf scans emit warnings for consistently unreadable files (i.e., included non-SBOMs) [Issue #3516] [PR #3545 @brandtkeller]
                            * Fail parsing github actions [Issue #3220]
                            * Go vulnerability returned when installed version is greater than fixed version [Issue #3520]

                          Dependencies

                          14 dependency changes (11 updated, 3 added).

                          Updated (11 packages)
                            * github.com/anchore/go-rpmdb v0.1.0 → v0.2.0
                            * github.com/anchore/syft v1.46.0 → v1.48.0
                            * github.com/klauspost/compress v1.18.6 → v1.19.0
                            * golang.org/x/text v0.38.0 → v0.39.0
                            * golang.org/x/tools v0.46.0 → v0.47.0
                            * gorm.io/gorm v1.31.1 → v1.31.2
                            * modernc.org/cc/v4 v4.28.2 → v4.28.4
                            * modernc.org/ccgo/v4 v4.34.0 → v4.34.4
                            * modernc.org/gc/v3 v3.1.2 → v3.1.3
                            * modernc.org/libc v1.72.3 → v1.73.4
                            * modernc.org/sqlite v1.51.0 → v1.53.0
                          Added (3 packages)
                            * github.com/mattn/go-sqlite3 v1.14.23
                            * gorm.io/driver/sqlite v1.6.0
                            * howett.net/plist v1.0.1

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            *
                            *
                            *
                            wagoodman, kzantow, and 4 other contributors
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                              ❤️ 1 PostboxRetinal reacted with heart emoji
                                All reactions
                                  * ❤️ 1 reaction
                              1 person reacted

                v0.115.0

                              v0.115.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 26 Jun 11:42
                              Immutable release. Only release title and notes can be modified.
                              v0.115.0
                              fa8b7e2
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * emit golang.org/x/net vulns from govlundb [PR #3534 @willmurphyscode]
                            * Merge Go vuln matches with GHSA matches [Issue #3515]

                          Bug Fixes

                            * only emit records for stdlib [PR #3527 @willmurphyscode]
                            * mark hummingbird distro as rolling [PR #3521 @willmurphyscode]
                            * disable go stdlib CPE matching by default [PR #3517 @willmurphyscode]
                            * merge in custom ranges when applicable [PR #3514 @willmurphyscode]
                            * exclude linux-kbuild deb indirect matches by default [PR #3506 @westonsteimel]
                            * avoid panic on invalid RHEL version IDs [PR #3490 @jspilman]
                            * Support reading CycloneDX 1.7 SBOMs [Issue #3373]
                            * Grype cannot read mariadb version correctly [Issue #3452]
                            * grype hangs when downloading certain images using registry client [Issue #3492]
                            * Can we get a fix for these Critical findings reported for grype [Issue #3484]

                          Additional Changes

                            * Security: bump golang.org/x/crypto to v0.52.0 to resolve multiple CVEs [Issue #3493]
                            * Security: bump golang.org/x/net to v0.55.0 to resolve CVEs [Issue #3494]

                          Dependencies

                          35 dependency changes (31 updated, 3 added, 1 removed). 5 vulnerabilities remediated.

                          🟢 Remediated (5)

                            * GHSA-33vj-92qq-66hc (High) — github.com/containerd/containerd/v2
                            * GHSA-cvxm-645q-p574 (Medium) — github.com/containerd/containerd/v2
                            * GHSA-jpcc-p29g-p8mq (Medium) — github.com/containerd/containerd/v2
                            * GHSA-rgh6-rfwx-v388 (High) — github.com/containerd/containerd/v2
                            * GHSA-xhf5-7wjv-pqxp (High) — github.com/containerd/containerd/v2
                          Updated (31 packages)
                            * github.com/ProtonMail/go-crypto v1.4.0 → v1.4.1
                            * github.com/anchore/bubbly v0.2.0 → v0.2.1
                            * github.com/anchore/clio v0.1.0 → v0.1.1
                            * github.com/anchore/fangs v0.1.0 → v0.1.1
                            * github.com/anchore/go-collections v0.1.0 → v0.1.1
                            * github.com/anchore/go-homedir v0.1.0 → v0.1.1
                            * github.com/anchore/go-logger v0.1.0 → v0.1.1
                            * github.com/anchore/go-lzo v0.1.0 → v0.1.1
                            * github.com/anchore/go-macholibre v0.1.0 → v0.1.1
                            * github.com/anchore/go-make v0.5.0 → v0.8.0
                            * github.com/anchore/go-struct-converter v0.1.0 → v0.2.0-rc2
                            * github.com/anchore/go-sync v0.1.0 → v0.1.1
                            * github.com/anchore/stereoscope v0.2.1 → v0.2.2
                            * github.com/anchore/syft v1.45.1 → v1.46.0
                            * github.com/charmbracelet/colorprofile v0.4.1 → v0.4.3
                            * github.com/clipperhouse/displaywidth v0.10.0 → v0.11.0
                            * github.com/clipperhouse/uax29/v2 v2.6.0 → v2.7.0
                            * github.com/containerd/containerd/v2 v2.3.1 → v2.3.2 (🟢 remediated GHSA-33vj-92qq-66hc, GHSA-cvxm-645q-p574, GHSA-jpcc-p29g-p8mq, GHSA-rgh6-rfwx-v388, GHSA-xhf5-7wjv-pqxp)
                            * github.com/docker/cli v29.4.3+incompatible → v29.5.3+incompatible
                            * github.com/google/go-containerregistry v0.21.6 → v0.21.7
                            * github.com/mattn/go-runewidth v0.0.19 → v0.0.21
                            * github.com/spdx/tools-golang v0.5.7 → v0.6.0-rc4
                            * github.com/sylabs/sif/v2 v2.24.0 → v2.24.1
                            * golang.org/x/crypto v0.52.0 → v0.53.0
                            * golang.org/x/mod v0.36.0 → v0.37.0
                            * golang.org/x/net v0.55.0 → v0.56.0
                            * golang.org/x/sync v0.20.0 → v0.21.0
                            * golang.org/x/sys v0.45.0 → v0.46.0
                            * golang.org/x/term v0.43.0 → v0.44.0
                            * golang.org/x/text v0.37.0 → v0.38.0
                            * golang.org/x/tools v0.45.0 → v0.46.0
                          Added (3 packages)
                            * github.com/piprate/json-gold v0.7.0
                            * github.com/pquerna/cachecontrol v0.0.0-1555304
                            * github.com/tailscale/hujson v0.0.0-ecc657c
                          Removed (1 package)
                            * github.com/google/osv-scanner v1.9.2

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            westonsteimel, jspilman, and willmurphyscode
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.114.0

                              v0.114.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 05 Jun 16:17
                              Immutable release. Only release title and notes can be modified.
                              v0.114.0
                              ef8e65a
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * Add ability to scan zarf packages [#3329 #3366 @brandtkeller]

                          Additional Changes

                            * respect withdrawn status of Go Vuln DB OSV records [#3495 @willmurphyscode]
                            * Govulndb OSV transformer [#3485 @willmurphyscode]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            willmurphyscode and brandtkeller
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                              🎉 1 joelmccoy reacted with hooray emoji
                                All reactions
                                  * 🎉 1 reaction
                              1 person reacted

                v0.113.0

                              v0.113.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 03 Jun 14:19
                              Immutable release. Only release title and notes can be modified.
                              v0.113.0
                              a0c0312
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * Include Ubuntu 26.04 "resolute" in distro codenames [#3397 @anchore-oss-update-bot]
                            * source RPM filtering on Hummingbird [#3410 @willmurphyscode]

                          Bug Fixes

                            * use relatedVulnerabilities description as fallback in SARIF output [#3271 @axidex]
                            * improve platform CPE determination logic [#3470 @westonsteimel]
                            * normalize uppercase V in semantic version comparison [#3461 @immanuwell]
                            * purl handling in cgr maven libs [#3420 @willmurphyscode]
                            * Treat uppercase V prefixes the same as lowercase v prefixes in fuzzy version comparison [#3037 #3089 @wasup-yash]
                            * Add Runtime Warnings When TLS Verification Is Disabled or HTTP Is Enabled [#3101 #3396 @Dashtid]
                            * Add support for the aarch64 architecture when parsing the version of Ruby gems in lockfiles [#3442 #3475 @msnandhis]
                            * zsh completion fails [#2933 #3433 @brandtkeller]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            *
                            *
                            *
                            *
                            *
                            *
                            westonsteimel, willmurphyscode, and 7 other contributors
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.112.0

                              v0.112.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 01 May 19:12
                              Immutable release. Only release title and notes can be modified.
                              v0.112.0
                              244f2a1
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * Expand ignore rules to owned sub packages of distro packages [#3368 #3326 @kzantow]

                          Additional Changes

                            * update anchore dependencies [#3391 @anchore-oss-update-bot]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            kzantow and anchore-oss-update-bot
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.111.1

                              v0.111.1
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 22 Apr 17:31
                              Immutable release. Only release title and notes can be modified.
                              v0.111.1
                              8981927
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Bug Fixes

                            * apply overlap by ownership removal to dynamically created relationships [#3363 @kzantow]
                            * compare mismatched package / db versions [#3372 @kzantow]
                            * Grype doesn't recognize debian component when "group" : "debian" is specified [#2967]
                            * HelpURI missing information in SARIF output [#2874 #3351 @will-bates11]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            kzantow and will-bates11
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.111.0

                              v0.111.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 09 Apr 13:29
                              Immutable release. Only release title and notes can be modified.
                              v0.111.0
                              1f19355
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * db diff for v6 [#3277 @kzantow]
                            * add ProvideFromReader for in-memory SBOM processing [#3344 @jspilman]
                            * match on hummingbird [#3331 @willmurphyscode]
                            * CSAF vex transformer [#3349 @willmurphyscode]
                            * curated mapping of known CPE to grype package specifiers [#3332 @westonsteimel]
                            * templates/html.tmpl - Add Grype version and vulnerability DB version [#2877 #3345 @kenvez]

                          Bug Fixes

                            * normalise version constraint types in v6 db [#3328 @westonsteimel]
                            * set alpm ecosystem for Arch Linux packages [#3324 @westonsteimel]
                            * spec-compliant CPE string formatting for db search commands [#3308 @westonsteimel]
                            * Update APK NAK handling to be based on ownership-by-file-overlap relationship [#3267 #3286 @kzantow]
                            * Wrong version output [#3306]

                          Additional Changes

                            * update anchore dependencies [#3321 @anchore-oss-update-bot]
                            * update tool versions [#3319 @anchore-oss-update-bot]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            *
                            *
                            *
                            westonsteimel, jspilman, and 4 other contributors
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.110.0

                              v0.110.0
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 19 Mar 18:16
                              Immutable release. Only release title and notes can be modified.
                              v0.110.0
                              dee8de4
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Added Features

                            * suppress GHSA matches on language packages in fixed APKs [#3282 @willmurphyscode]

                          Bug Fixes

                            * use Syft for decoding CPEs [#3058 @chovanecadam]

                          Additional Changes

                            * bump github.com/buger/jsonparser to v1.1.2 [#3297 @willmurphyscode]
                            * update quality gate labels [#3293 @westonsteimel]

                          (Full Changelog)

                          Contributors

                            *
                            *
                            *
                            westonsteimel, willmurphyscode, and chovanecadam
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions

                v0.109.1

                              v0.109.1
                            Compare

                                  Choose a tag to compare

                                      Sorry, something went wrong.

                                Filter
                                  Loading

                                        Sorry, something went wrong.

                                          Uh oh!

                                          There was an error while loading. Please reload this page.

                                  No results found

                                View all tags
                              github-actions released this 09 Mar 19:50
                              Immutable release. Only release title and notes can be modified.
                              v0.109.1
                              baf391d
                                      This commit was created on GitHub.com and signed with GitHub’s verified signature.
                                    GPG key ID: B5690EEEBB952194
                                      Verified
                                    Learn about vigilant mode.

                          Bug Fixes

                            * CVE-2025-12183 is not detected even if vulnerable jar is present [#3205]

                          Additional Changes

                            * migrate fixtures to testdata [#3263 @wagoodman]

                          (Full Changelog)

                          Contributors

                            *
                            wagoodman
                          Assets 21
                            Loading

                                    Uh oh!

                                    There was an error while loading. Please reload this page.

                                All reactions
                Previous 1 2 3 4 5 … 19 20 Next
                Previous Next

  Footer

      © 2026 GitHub, Inc.

    Footer navigation

      * Terms
      * Privacy
      * Security
      * Status
      * Community
      * Docs
      * Contact
      * Manage cookies
      * Do not share my personal information
    You can’t perform that action at this time.
Consejo: Resalte el texto para compartir o agregar a las listas de ignorados.  — Download difference patch
Por ahora, las diferencias se realizan en texto, no gráficamente, solo está disponible la última captura de pantalla.
La captura de pantalla requiere que Playwright/WebDriver esté habilitado