github.com/aquasecurity/trivy vulnerabilities (Go)

5 vulnerabilities.

• github.com/aquasecurity/trivy Go Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write CVE-2026-63328 Fix available 6.8 MediumAugust 18, 2026
• github.com/aquasecurity/trivy Go Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser CVE-2026-54448 Fix available 6.9 MediumJune 25, 2026
• github.com/aquasecurity/trivy Go Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts CVE-2026-55092 Fix available 7.0 HighJune 25, 2026
• github.com/aquasecurity/trivy Go Trivy ecosystem supply chain briefly compromised CVE-2026-33634 In KEVPublic exploitFix available EPSS 59.7% 9.4 CriticalMarch 23, 2026
• github.com/aquasecurity/trivy Go Trivy possibly leaks registry credential when scanning images from malicious registries CVE-2024-35192 Fix available 5.5 MediumMay 20, 2024