oss/syft
2
0
Fork 0
mirror of https://github.com/anchore/syft.git synced 2026-11-01 15:06:36 +01:00
Code Issues Packages Projects Releases Wiki Activity
3,467 Commits 65 Branches 273 Tags
ef40eec38d030ca64bfc54a9df9f17fca2cbbb8f
Commit Graph
1 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Peter Bücker 6755377554 fix: CPE detection for APK libavif to use aomedia vendor (#4597) 
NVD uses "aomedia" as the vendor for libavif CVEs. This change adds
libavif to the APK package CPE candidate additions with "aomedia" as
an additional vendor, enabling Syft/Grype to match CVEs like
CVE-2025-48174 and CVE-2025-48175.

Signed-off-by: Peter Bücker <peter.buecker@gmail.com>
 2026-02-05 09:11:44 +00:00