We're Going on a CVE Hunt

Fri, 14 Aug 2026 00:00:00 +0000

Two scanners. One said nothing. One said there was a problem.

That’s where this started — and that gap is exactly the kind of thing that should make you curious rather than relieved.

The Setup

The container registry scanner — the main one, the one whose output the team relied on — flagged nothing. All clear. The secondary scanner, run as part of a broader policy check, flagged a mid-severity CVE from 2024. Old finding, mid-level severity, and the primary scanner wasn’t concerned. The natural read: false positive, secondary scanner being noisy, move on.

Cve on Ampretia:Dev

We're Going on a CVE Hunt

The Setup