osv-scanner · Issues· 111 open
Open on GitHubLocally synced open issues (discussions stay on GitHub)
- #6
Dependency Dashboard
Updated Sep 18, 2026 - #3001
Config-driven vulnerability suppression leaves no trace in machine-readable output
Updated Sep 17, 2026 - #1238
Fail to update Maven packages with properties in their names
bugguided remediationbacklogUpdated Sep 16, 2026 - #3016
Feature request - Container scanning - HTML output: Add a filter to only show items with a fix available
good first issueUpdated Sep 16, 2026 - #3093
SARIF output emits one result per matched advisory in an alias group, creating duplicate code scanning alerts
Updated Sep 16, 2026 - #999
Add support for DNF package manager
enhancementbacklogUpdated Sep 15, 2026 - #1754
Support matching Go pseudoversions
backlogUpdated Sep 15, 2026 - #1275
Display severity using ecosystem-specific priority tags
enhancementUpdated Sep 15, 2026 - #570
Improve osv-scanner --help documentation
documentationgood first issuebacklogUpdated Sep 14, 2026 - #2988
osv-scanner fix erroneously reports blocked vulnerabilities as fixed
Updated Sep 14, 2026 - #3073
npm lockfile: CDN-resolved SheetJS releases are reported against npm-registry ranges
Updated Sep 10, 2026 - #3057
Explicit --licenses=false enables license scanning
Updated Sep 10, 2026 - #254
Add RPM/Red Hat ecosystem support
good first issuebacklogUpdated Sep 9, 2026 - #1244
Support pyproject.toml files
enhancementbacklogUpdated Sep 8, 2026 - #2881
npm finding for local package on package-lock.lock - false positive?
Updated Sep 8, 2026