Search results

Tag osv-scanner Docker images with major version

Status: Open.

#2803 In google/osv-scanner;

· bestbeforetoday opened on May 14, 2026

Add ability to list plugins from CLI

Status: Open.

#2798 In google/osv-scanner;

· dosisod opened on May 13, 2026

output/vertical: pkg name/version not sanitized — residual GHA workflow-command injection after #2750

Status: Open.

#2792 In google/osv-scanner;

· evilgensec opened on May 10, 2026

Support for CycloneDX 1.7 SBOMs

backlogImportant but currently unprioritizedImportant but currently unprioritized

Status: Open.

#2787 In google/osv-scanner;

· Gerharddc opened on May 8, 2026

experimental-mcp: SSE server exposes unauthenticated scan_vulnerable_dependencies tool with no path restrictions

Status: Open.

#2785 In google/osv-scanner;

· Tobsboy2 opened on May 7, 2026

Exclude MuleSoft API specifications

Status: Open.

#2776 In google/osv-scanner;

· meterglost opened on May 6, 2026

--offline-vulnerabilities also disables transitive scanning

Status: Open.

#2775 In google/osv-scanner;

· gotgolem opened on May 6, 2026

filterPackageVulns: orphan vulnerabilities silently dropped when all groups are ignored

Status: Open.

#2756 In google/osv-scanner;

· hyhmrright opened on Apr 30, 2026

Incomplete fix for #2669 / c2c9aae — raw \r in default/table/vertical output enables GitHub Actions workflow-command injection [via vrp team followup]

Status: Open.

#2749 In google/osv-scanner;

· hits313 opened on Apr 27, 2026

Failure to resolve local maven packages

Status: Open.

#2738 In google/osv-scanner;

· Sytten opened on Apr 24, 2026

Guided Remediation support for Go modules

Status: Open.

#2714 In google/osv-scanner;

· cedws opened on Apr 11, 2026

Migrate to use OSV-Scalibr's clients and packages

cleanup

Status: Open.

#2675 In google/osv-scanner;

· cuixq opened on Mar 23, 2026