Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the registry credentials will be included unsanitized in the output file. This issue has been patched in version 0.104.1. Users running affected versions of grype can work around this vulnerability by redirecting stdout to a file instead of using the --file or --output options.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a74aa25180 advisory.

    Update to 0.50.18

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-847455954a advisory.

    Update to version 0.50.18

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Grype is a vulnerability scanner for container images and filesystems. A credential disclosure
    vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are
    defined and the output of grype is written using the --file or --output json=<file> option, the registry
    credentials will be included unsanitized in the output file. This issue has been patched in version
    0.104.1. Users running affected versions of grype can work around this vulnerability by redirecting stdout
    to a file instead of using the --file or --output options. (CVE-2025-65965)

ID	Name	Product	Family	Type	Severity
301501	Fedora 42 : k9s (2026-a74aa25180)	Nessus	Fedora Local Security Checks	Local	high
298307	Fedora 43 : k9s (2026-847455954a)	Nessus	Fedora Local Security Checks	Local	high
436216	Alpine: multiple grype packages: security update to 0.104.1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	Local	high
436216	Alpine: multiple grype packages: security update to 0.104.1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	Local	high
436166	SCA: security update for github.com/anchore/grype (GHSA-6gxw-85q2-q646)	Tenable Cloud Security	SCA Checks	Local	high
436166	SCA: security update for github.com/anchore/grype (GHSA-6gxw-85q2-q646)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2025-65965

high

Tenable Plugins

high

high

high

high

high

high