missing CVE data
Open
@cdupuis is already working on this.
Since Oct 29, 2025.
- Dominant language
- Shell
- Stars
- 454
- Forks
- 134
- PR merge metrics
- No merged PRs in 30d
Description
Docker Scout treats images vulnerable to CVE-2025-11579 as having a clean bill of health with no CVE's.
Whereas Snyk Container identifies this, and other CVE's in the Snyk Vulnerability Database.
https://www.cve.org/CVERecord?id=CVE-2025-11579
https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMNWAPLESRARDECODEV2-13537508
Can we please sync more data between the Docker Scout and Snyk databases? As a developer, it's confusing to see mutually exclusive security reports. Very, very, very often, Docker Scout and Snyk report completely different sets of CVE's.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.