Software Passport · public repository

yxizhong/SSC

Observed by SPR on 2026-09-14 at commit e958cdaee9653d893cc25e61a9116fce64ffc875 (master). Source: github.com/yxizhong/SSC.

SBOM components1

Open findings68

Critical / high2 / 12

Evidence items5

What was observed

Syft generated the software bill of materials from the repository's manifests; each component was checked against the OSV vulnerability database; the tree was scanned for secrets, infrastructure-as-code issues and licence signals. Vendor-supplied attestations: none — this page contains only independent observation.

Open findings (top 25 of 68)

Severity	Finding	Component
CRITICAL	GHSA-4r2x-xpjr-7cvv	vllm@0.10.2
CRITICAL	GHSA-94f4-hr76-p5j6	vllm@0.10.2
HIGH	GHSA-8fr4-5q9j-m8gm	vllm@0.10.2
HIGH	GHSA-mrw7-hf4f-83pf	vllm@0.10.2
HIGH	GHSA-qh4c-xf7m-gxfc	vllm@0.10.2
HIGH	GHSA-7972-pg2x-xr59	vllm@0.10.2
HIGH	GHSA-2pc9-4j83-qjmr	vllm@0.10.2
HIGH	GHSA-pmqf-x6x8-p7qw	vllm@0.10.2
HIGH	GHSA-3f6c-7fw2-ppm4	vllm@0.10.2
HIGH	GHSA-mcmc-2m55-j8jj	vllm@0.10.2
HIGH	GHSA-wr9h-g72x-mwhm	vllm@0.10.2
HIGH	GHSA-wcwg-c5fc-9vrc	vllm@0.10.2
HIGH	GHSA-q8gq-377p-jq3r	vllm@0.10.2
HIGH	GHSA-rwxx-mrjm-wc2m	vllm@0.10.2
MEDIUM	License not observed	vllm
LOW	GHSA-x368-4g9h-fvv4	vllm@0.10.2
UNKNOWN	GHSA-7h4p-rffg-7823	vllm@0.10.2
UNKNOWN	GHSA-4hhp-h66f-j5j7	vllm@0.10.2
UNKNOWN	GHSA-6pr9-rp53-2pmc	vllm@0.10.2
UNKNOWN	GHSA-hwrm-c4cx-rf4j	vllm@0.10.2
UNKNOWN	GHSA-6fvq-23cw-5628	vllm@0.10.2
UNKNOWN	GHSA-48jh-3gj7-fg8v	vllm@0.10.2
UNKNOWN	GHSA-hpv8-x276-m59f	vllm@0.10.2
UNKNOWN	GHSA-hgg8-fqqc-vfmw	vllm@0.10.2
UNKNOWN	GHSA-6c4r-fmh3-7rh8	vllm@0.10.2

Get the full passport

Continuous verification, evidence ledger, plain-English and auditor reports, and a shareable signed passport are available to SPR customers.

See plans Review your own repository free

Software Passport Registry Ltd. Every number on this page was observed by SPR's own scan of the public repository at the commit shown; nothing is estimated or vendor-supplied. Absence of a finding is not proof of safety. Terms · Privacy