Log in Start free

Anchore

Products

ProductCVEsExploitedLatest
quill3–Mar 11, 2026
Anchore Enterprise2–Jul 28, 2026
syft2–Mar 26, 2026
anchore-engine1–May 27, 2020
grype1–Nov 25, 2025
stereoscope1–Jan 31, 2024

Exploited and recent CVEs

  • CVE-2026-63727 High 8.8 Anchore Enterprise Privilege Escalation via User Management API 0.4%
  • CVE-2026-33481 Medium 5.3 Syft improper temporary file cleanup 0.4%
  • CVE-2026-25076 High 7.3 Anchore Enterprise GraphQL Reports API SQL injection 0.3%
  • CVE-2026-31961 Medium 5.5 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing 0.1%
  • CVE-2026-31960 Medium 5.3 DoS in Quill via unbounded read of HTTP response body during notarization <0.1%
  • CVE-2026-31959 Medium 5.3 SSRF in Quill via unvalidated URL from Apple notarization log retrieval <0.1%
  • CVE-2025-65965 High 8.2 Grype has a credential disclosure vulnerability in Grype JSON output 0.2%
  • CVE-2024-24579 Medium 5.3 Tar path traversal in stereoscope when processing OCI tar archives 0.4%
  • CVE-2023-24827 Medium 6.5 Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft 0.8%
  • CVE-2020-11075 High 7.7 Shell Escape in Anchore Engine 1.8%