diff --git a/go.mod b/go.mod
index 9218d367..2b36133d 100644
--- a/go.mod
+++ b/go.mod
@@ -7,7 +7,7 @@ require (
 	github.com/fatih/color v1.18.0
 	github.com/gkampitakis/go-snaps v0.5.15
 	github.com/google/go-cmp v0.7.0
-	github.com/google/osv-scalibr v0.3.3-0.20250919162947-bcadd5b8f946
+	github.com/google/osv-scalibr v0.3.5-0.20251002191929-de9496dc5aa2
 	github.com/tidwall/jsonc v0.3.2
 	golang.org/x/mod v0.28.0
 	gopkg.in/yaml.v3 v3.0.1
diff --git a/go.sum b/go.sum
index 18cc98ab..792c24ea 100644
--- a/go.sum
+++ b/go.sum
@@ -13,8 +13,8 @@ github.com/goccy/go-yaml v1.18.0 h1:8W7wMFS12Pcas7KU+VVkaiCng+kG8QiFeFwzFb+rwuw=
 github.com/goccy/go-yaml v1.18.0/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
 github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
-github.com/google/osv-scalibr v0.3.3-0.20250919162947-bcadd5b8f946 h1:b6158og59wx3u1CQnPwn4BUmt8PQrSND8aAJomM6304=
-github.com/google/osv-scalibr v0.3.3-0.20250919162947-bcadd5b8f946/go.mod h1:YeOH2wz0HlccjDbYYYTcX01ZyAuwqhZcpQFV7Cxsrwo=
+github.com/google/osv-scalibr v0.3.5-0.20251002191929-de9496dc5aa2 h1:2hTIOqFloEiruBSVKrwfz25H/aRICGttAAxLFfaKFdA=
+github.com/google/osv-scalibr v0.3.5-0.20251002191929-de9496dc5aa2/go.mod h1:yrL4tlR1cXIb2TUyEmtOdTR5tYYuXzfSprEfwyqp2qU=
 github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE=
 github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk=
 github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=