v0.91.1
Bug Fixes
- Assume that empty versions should match on all possible versions [#2591 @wagoodman]
- Fix severity field in
db search vuln[#2589 @wagoodman] - Recover from panic within a matcher [#2590 @wagoodman]
- Should only check maven central if pom info is missing [#2216 #2547 @tdunlap607]
- grype db search GHSA-mrrh-fwg8-r2c3 doesn't return results [#2530]
- Grype stopped reporting vulnerabilities after upgrade [#2608 #2610 @willmurphyscode]
- Grype does not handle cache-dir containing ~ correctly [#2599 #2600 @kzantow]
- Grype should expand
~in paths in config file [#2024 #2600 @kzantow] - False Positive: Multiple old CVEs in chromium 134.0.6998.117 for apk ecosystem [#2581]
- Missing grype DB update from 20250411 [#2593]
- Does not fill in the Level field of the SARIF result object [#2511 #2571 @bdovaz]
Additional Changes
Contributors
wagoodman, bdovaz, and 4 other contributors