Search results

False positive on platform-specific RubyGems versions in CycloneDX SBOM

Status: Open.

#2898 In google/osv-scanner;

· xballoy opened on Jun 19, 2026

Improve error message when Python requirements transitive dependency resolution fails behind SOCKS5 proxy on Windows

Status: Open.

#2891 In google/osv-scanner;

· chiyi-creator opened on Jun 15, 2026

Harden gh-annotations workflow command escaping

Status: Open.

#2889 In google/osv-scanner;

· Zhaowenhao23469 opened on Jun 15, 2026

npm finding for local package on package-lock.lock - false positive?

Status: Open.

#2881 In google/osv-scanner;

· nirhaas opened on Jun 11, 2026

Add support for remediation with pnpm and yarn

enhancementNew feature or requestNew feature or request

Status: Open.

#2883 In google/osv-scanner;

· jahirfiquitiva opened on Jun 11, 2026

Feature request: GitLab Security Report output format + CI/CD component

backlogImportant but currently unprioritizedImportant but currently unprioritized

Status: Open.

#2875 In google/osv-scanner;

· AlexLaroche opened on Jun 10, 2026

JSON output doesn't include purls for scanned packages

Status: Open.

#2874 In google/osv-scanner;

· gotgolem opened on Jun 10, 2026

IsAffected panics on an advisory with an unrecognized ecosystem, crashing the whole scan

Status: Open.

#2867 In google/osv-scanner;

· Lougarou opened on Jun 5, 2026

internal/imodels: package-level *Package cache leaks across scans, drives OOM in long-running embeddings

Status: Open.

#2859 In google/osv-scanner;

· gpoulin opened on Jun 2, 2026

npm finding for git package on yarn.lock - false positive?

good first issueGood for newcomersGood for newcomers

Status: Open.

#2850 In google/osv-scanner;

· nirhaas opened on May 30, 2026

Interactive fix TUI: npm install --package-lock-only omits --ignore-scripts → RCE via malicious package.json lifecycle scripts on Write.

Status: Open.

#2841 In google/osv-scanner;

· er3b07 opened on May 27, 2026

Feature Request: Scan GitHub Actions Workflows

Status: Open.

#2821 In google/osv-scanner;

· rohitkumarankam opened on May 19, 2026