<p>Update: thanks to <span class="h-card" translate="no"><a href="https://social.chriswb.dev/@chrisw_b" class="u-url mention">@<span>chrisw_b</span></a></span> for hunting this down: looks like a huge flaw in the vulnerability scanner being used by these tools (it ignores namespaces on package names!)</p><p>More info:</p><p><a href="https://github.com/jridgewell/gen-mapping/issues/12" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/jridgewell/gen-mapp</span><span class="invisible">ing/issues/12</span></a><br /><a href="https://github.com/anchore/grype/issues/1701" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://</span><span class="ellipsis">github.com/anchore/grype/issue</span><span class="invisible">s/1701</span></a></p>
- Post #298
- Next March 24, 2025 at 2:23:46 PM UTC
- Previous March 24, 2025 at 1:41:43 PM UTC
- Mon, 24 Mar 2025 14:14:04 GMT — Zach Leatherman
- Original on Fediverse