CVE-2025-65965

Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the registry credentials will be included unsanitized in the output file. This issue has been patched in version 0.104.1. Users running affected versions of grype can work around this vulnerability by redirecting stdout to a file instead of using the --file or --output options.

• CWE-212

• https://github.com/anchore/grype/commit/39f7fa17af2739cafe9b27176d4a68f7c05f21c1
• https://github.com/anchore/grype/pull/3068
• https://github.com/anchore/grype/security/advisories/GHSA-6gxw-85q2-q646

Published

Nov 25, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-6596Improper Neutralization of Input During Web Page Generation …0
• CVE-2025-65960Contao is an Open Source CMS. From version 4.0.0 to before 4…6.6
• CVE-2025-65961Contao is an Open Source CMS. From version 4.0.0 to before 4…4.8
• CVE-2025-65962Tuleap is a free and open source suite for management of sof…4.3
• CVE-2025-65963Files is a module for managing files inside spaces and user …5.4
• CVE-2025-65964n8n is an open source workflow automation platform. Versions…8.8
• CVE-2025-65966OneUptime is a solution for monitoring and managing online s…8.1
• CVE-2025-6597Vulnerability in Wikimedia Foundation MediaWiki. This vulner…0
• CVE-2025-6599An uncontrolled resource consumption vulnerability in the we…7.5
• CVE-2025-65995When a DAG failed during parsing, Airflow’s error-reporting …6.5
• CVE-2025-65998Apache Syncope can be configured to store the user password …7.5
• CVE-2025-6600An exposure of sensitive information vulnerability was ident…4.3