v0.35.0

Release notes for grype v0.35.0

Release Notes

Version v0.35.0

v0.35.0 (2022-04-13)

Full Changelog

Added Features

  • Indicate location of vulnerability [Issue #561]
  • Optional External Data Source Reference for Maven Packages [Issue #711]

Bug Fixes

  • False positive (critical) on GHSA-8v27-2fg9-7h62 [Issue #632]
  • False Positive on CVE-2020-36518 [Issue #692]
  • Matches should be sorted by package name for template output [Issue #696]
  • panic: runtime error: invalid memory address or nil pointer dereference [Issue #702]
Last modified October 10, 2025: fix reference links (1594d93)