Issues

• fix(alpine): reject malformed CVE identifiers before emitting vulnerability records

  anchore/vunnel#1444 · Filter by author coygeek opened on Nov 10, 2026

• Proposal: CPE enrichment for ICS/OT CVEs left unenriched by NVD (OpenCPE-ICS)

  enhancement
  anchore/vunnel#1419 · Filter by author NexKernelSecurity opened on Oct 29, 2026

• gnu:ncurses CPE returns zero vulnerability matches despite active NVD CVE (CVE-2023-29491) covering affected version

  anchore/vunnel#1298 · Filter by author Alex-Moraru opened on Aug 8, 2026

• NVD provider ignores the package data Apache and other reporters supply

  enhancement
  anchore/vunnel#1296 · Filter by author carlosfunk opened on Aug 6, 2026
  2

  

• Capture notes section from Ubuntu security data

  enhancement
  anchore/vunnel#1126 · Filter by author westonsteimel opened on Apr 8, 2026

• Create a provider for Haskell security advisories

  enhancementprovider:new
  anchore/vunnel#1039 · Filter by author westonsteimel opened on Feb 3, 2026

• enhance http_wrapper to be a better http citizen

  enhancementgood first issue
  anchore/vunnel#1037 · Filter by author willmurphyscode opened on Feb 3, 2026
  1

• Create a provider for OCaml security advisories

  enhancementprovider:new
  anchore/vunnel#1033 · Filter by author westonsteimel opened on Feb 2, 2026

• rocky provider should emit not affected package entries

  enhancement
  anchore/vunnel#1029 · Filter by author westonsteimel opened on Jan 30, 2026

• Create a provider for R advisory data

  enhancementOSVprovider:new
  anchore/vunnel#969 · Filter by author westonsteimel opened on Jan 8, 2026
  7

• Create a provider for perl CPAN advisories

  enhancementprovider:new
  anchore/vunnel#967 · Filter by author westonsteimel opened on Jan 8, 2026
  2

• Create a provider for Julia advisories

  enhancementOSVprovider:new
  anchore/vunnel#966 · Filter by author westonsteimel opened on Jan 8, 2026
  9

• Create a provider for the ENISA EUVD data

  enhancementprovider:new
  anchore/vunnel#915 · Filter by author westonsteimel opened on Nov 4, 2025
  4

• add rocky and bitnami to grype-db-observed-fix-date packages

  Feature

  anchore/vunnel#887 · Filter by author cyse-labs opened on Sep 15, 2025
  4

• Optionally emit disclosure identifier instead of advisory identifier when both are available

  enhancement
  anchore/vunnel#834 · Filter by author willmurphyscode opened on Jul 24, 2025

• Release version is not being set correctly

  bugrelease
  anchore/vunnel#793 · Filter by author wagoodman opened on Mar 14, 2025

• Add wind river linux provider

  enhancementprovider:new
  anchore/vunnel#792 · Filter by author wagoodman opened on Mar 14, 2025
  

• Possible False Negatives on Amazon-Linux-Based Systems

  enhancementneeds-investigation
  anchore/vunnel#776 · Filter by author mattlorimor opened on Feb 26, 2025
  7

  

• Track date timestamps in vulnerability data

  enhancement
  anchore/vunnel#742 · Filter by author wagoodman opened on Dec 4, 2024
  2

  

• performance: investigate mashumaro orjson serializers

  enhancementperformance
  anchore/vunnel#727 · Filter by author willmurphyscode opened on Nov 6, 2024

• providers should download small files concurrently

  enhancementperformance
  anchore/vunnel#700 · Filter by author willmurphyscode opened on Oct 4, 2024

• There should be an easier way to add test cases for providers

  developer-experience
  anchore/vunnel#653 · Filter by author willmurphyscode opened on Aug 5, 2024
  2

• Improve error handling of deterministic minor errors

  enhancement
  anchore/vunnel#544 · Filter by author willmurphyscode opened on Apr 18, 2024

• Wolfi and Chainguard providers and not handling download errors as expected

  bug
  anchore/vunnel#515 · Filter by author dperry opened on Mar 14, 2024
  4

• Quality gate should use expected_namespaces to filter results

  enhancement
  anchore/vunnel#359 · Filter by author wagoodman opened on Oct 24, 2023