Issues

• Feature: Correlate SRAC safety context with SBOM findings

  owasp-dep-scan/dep-scan#533 · Filter by author devashridatta-dotcom opened on Sep 27, 2026

• [infra] investigate hatchling to replace uv

  owasp-dep-scan/dep-scan#485 · Filter by author prabhu opened on Mar 20, 2026

• Bug: node-tar CVE was not identified as reachable for cdxgen

  bug
  owasp-dep-scan/dep-scan#482 · Filter by author prabhu opened on Mar 4, 2026
  1

• Feature: blint 3.1.x disassembly support

  enhancement
  owasp-dep-scan/dep-scan#478 · Filter by author prabhu opened on Jan 27, 2026

• Feature: syft BOM engine

  enhancement
  owasp-dep-scan/dep-scan#476 · Filter by author prabhu opened on Jan 27, 2026

• Comparing v6 and v5

  owasp-dep-scan/dep-scan#462 · Filter by author almaz045 opened on Dec 24, 2025
  7

• Bug: Exclude args being passed incorrectly to cdxgen

  bug
  owasp-dep-scan/dep-scan#450 · Filter by author griftnrun opened on Oct 15, 2025
  2

• Feature: specify non-standard filename for dep requirements files

  enhancement
  owasp-dep-scan/dep-scan#448 · Filter by author ryanprior opened on Oct 1, 2025

• False-Positive: MAL-2025-6022

  false-positive
  owasp-dep-scan/dep-scan#446 · Filter by author ilyaholoday123 opened on Sep 11, 2025
  1

  

• [V6] Same CVE but different bom-ref

  owasp-dep-scan/dep-scan#442 · Filter by author ghost opened on Jul 22, 2025
  3

• Bug: Cannot process SBOM file in server mode

  bugserver
  owasp-dep-scan/dep-scan#433 · Filter by author dw7o opened on Jun 20, 2025
  2

• [v6] Add annotations to the generated VDR

  owasp-dep-scan/dep-scan#420 · Filter by author prabhu opened on Apr 26, 2025

• [v6] Support min-confidence and technique filters

  owasp-dep-scan/dep-scan#418 · Filter by author prabhu opened on Apr 26, 2025

• Is depscan support for a mix lockfile-OSGI project?

  owasp-dep-scan/dep-scan#407 · Filter by author tienmtran opened on Apr 14, 2025
  3

• Feature: finding path

  enhancement
  owasp-dep-scan/dep-scan#403 · Filter by author Ali-Yazdani opened on Apr 3, 2025
  5

• Generate bom.vdr.json and list of vulnerabilities

  owasp-dep-scan/dep-scan#398 · Filter by author gnittala opened on Mar 5, 2025
  1

• Analysis recommendation integrated into a build

  owasp-dep-scan/dep-scan#397 · Filter by author gnittala opened on Feb 28, 2025

• Ability to supply a list of CVE exclusions or suppressions, to be excluded from results / determining a non-zero exit code

  owasp-dep-scan/dep-scan#396 · Filter by author hg2001in opened on Feb 25, 2025
  4

• Ability to return non-zero exit code for specified severity threshold

  owasp-dep-scan/dep-scan#395 · Filter by author hg2001in opened on Feb 25, 2025
  4

• CPE support

  owasp-dep-scan/dep-scan#389 · Filter by author asadjaffar opened on Feb 11, 2025
  2

• Bug: Sometimes links in markdown format are broken in description

  bug
  owasp-dep-scan/dep-scan#387 · Filter by author amanaev opened on Feb 4, 2025
  1

• False-Positive: MAL-2024-4696 found on Microsoft Webview

  false-positive
  owasp-dep-scan/dep-scan#385 · Filter by author Geertkok1 opened on Jan 28, 2025
  4

  

• Feature: Add a more descriptive message on reports if no vulnerabilities have been found

  bug
  owasp-dep-scan/dep-scan#384 · Filter by author Forgh opened on Jan 8, 2025
  1

• Question about direct and transitive dependencies

  owasp-dep-scan/dep-scan#357 · Filter by author almaz045 opened on Oct 11, 2024
  1

• False-Positive: Receiving findings for lodash@4.17.21

  false-positive
  owasp-dep-scan/dep-scan#353 · Filter by author harshit-kochar opened on Sep 27, 2024
  4