https://github.com/anchore/grype/releases/tag/v0.40.0 CVE-2022-26945: https://github.com/advisories/GHSA-x24g-9w7v-vprh