Post #23742 53 Oct 15, 2026, 15:07 UTC Trivy and govulncheck found the same vulnerability, but the code wasn't in the binaryhttps://www.a3thinker.it/articles/not-in-the-binary/@secharvester www.a3thinker.it Two scanners agreed, and the code was not in my binary - Luigi Iacuaniello A scan of the web server my project builds reported a High-severity vulnerability in its HTTP/2 library. A second scanner, one that checks which functions a program actually calls, confirmed the vulnerability and found four more. I drafted the release note…