The scanner now also detects vulnerabilities in other formats of project and container dependencies: Node modules, Python wheels, Java Uber jars and Go binaries as well as lock and manifest files ...

The Salt Project resolved the vulnerability in a February security release.The group also patched other high-impact bugs including CVE-2021-3197, a shell injection flaw in Salt-API's SSH client ...

Scanning the same sample Java project with Grype finds the Log4j vulnerability and identifies it as a critical severity. Anchore Syft and Grype have the ability to scan your applications no matter ...