All issues

Search results

--no-resolve treats an unpinned lower-bound specifier (>=X.Y.Z) in requirements.txt as the exact version to check

Status: Open.

#3025 In google/osv-scanner;

· BenkiNew opened on Aug 28, 2026

[PyPI] Transitive dependency resolution reports outdated versions (false positives) with default data source

Status: Open.

#3018 In google/osv-scanner;

· miraeti opened on Aug 25, 2026

Regression in 2.5.0, 2.5.1 affecting Golang stdlib

await releaseIssue has been fixed but is awaiting the next release.Issue has been fixed but is awaiting the next release.

Status: Open.

#3017 In google/osv-scanner;

· alexg-axis opened on Aug 25, 2026

Feature request - Container scanning - HTML output: Add a filter to only show items with a fix available

good first issueGood for newcomersGood for newcomers

Status: Open.

Feature

#3016 In google/osv-scanner;

· KoenDG opened on Aug 25, 2026

Feature request: Container scanning HTML output - Do not close the filter checklist each time something is clicked

Status: Open.

#3015 In google/osv-scanner;

· KoenDG opened on Aug 25, 2026

Migration guide uses an unsupported osv-scanner SPDX format name

Status: Open.

#3009 In google/osv-scanner;

· haimingZZ opened on Aug 23, 2026

SBOM components with version set are silently dropped from vulnerability matching when their PURL omits @version

Status: Open.

#3007 In google/osv-scanner;

· bianyeyu opened on Aug 21, 2026

exit_code_redirect.sh ignores --allow-no-lockfiles=false in multiline Action input

Status: Open.

#3005 In google/osv-scanner;

· darpadebt opened on Aug 19, 2026

Config-driven vulnerability suppression is silent at default verbosity

Status: Open.

#3001 In google/osv-scanner;

· herdiyana256 opened on Aug 17, 2026

spdx.Satisfies: unbounded recursion causes uncatchable stack overflow on deeply nested license expressions

Status: Open.

#2993 In google/osv-scanner;

· Amey-Thakur opened on Aug 15, 2026

osv-scanner fix erroneously reports blocked vulnerabilities as fixed

Status: Open.

#2988 In google/osv-scanner;

· joshuatqualtrics opened on Aug 13, 2026

SARIF output always reports level=warning, ignoring the vulnerability's severity

Status: Open.

#2981 In google/osv-scanner;

· nvuillam opened on Aug 11, 2026