MEDIUM6.5Go
GHSA-jp7v-3587-2956· CVE-2023-24827, GO-2023-1533Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set
Modified: 8/20/2024
package
Go/github.com/anchore/syft
pkg:go/github.com/anchore/syft
MEDIUM5.3Go
GHSA-rjcw-vg7j-m9rc· CVE-2026-33481, GO-2026-4809Syft improper temporary file cleanup
Modified: 9/10/2026
—Go
GO-2023-1533· CVE-2023-24827, GHSA-jp7v-3587-2956Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in github.com/anchore/syft
Modified: 3/3/2026
—Go
GO-2026-4809· CVE-2026-33481, GHSA-rjcw-vg7j-m9rcSyft improper temporary file cleanup in github.com/anchore/syft
Modified: 3/24/2026