Anchore vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20231
3. 20241
4. 20251
5. 20266

Newest CVEs

• CVE-2026-63727

  Anchore Enterprise Privilege Escalation via User Management API

  Anchore · Anchore Enterprise

  High8.7
• CVE-2026-33481

  Syft improper temporary file cleanup

  anchore · syft

  Medium5.3
• CVE-2026-25076

  Anchore Enterprise GraphQL Reports API SQL injection

  Anchore · Anchore Enterprise

  High8.5
• CVE-2026-31961

  Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing

  anchore · quill

  Medium5.5
• CVE-2026-31960

  DoS in Quill via unbounded read of HTTP response body during notarization

  anchore · quill

  Medium5.3
• CVE-2026-31959

  SSRF in Quill via unvalidated URL from Apple notarization log retrieval

  anchore · quill

  Medium5.3
• CVE-2025-65965

  Grype has a credential disclosure vulnerability in Grype JSON output

  anchore · grype

  High8.2
• CVE-2024-24579

  Tar path traversal in stereoscope when processing OCI tar archives

  anchore · stereoscope

  Medium5.3
• CVE-2023-24827

  Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft

  anchore · syft

  Medium6.5
• CVE-2020-11075

  Shell Escape in Anchore Engine

  anchore · anchore-engine

  High7.7