CVE-2026-33481

Name of the Vulnerable Software and Affected Versions Syft versions prior to 1.42.3

Description Syft did not properly remove temporary files if temporary storage became full during a scan. This occurred when unpacking archives, specifically with large or highly compressed archives. The issue caused Syft to exit without deleting temporary files, leading to depletion of temporary storage and potentially preventing future Syft runs or other system utilities from functioning correctly.

Recommendations Update to version 1.42.3 or later.