Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Aquasec
Trivy Action
Aquasec Trivy Action vulnerabilities
Any severity
Critical
High or worse
Medium or worse
Low or worse
Any EPSS
EPSS 10% or more
EPSS 50% or more
EPSS 90% or more
Known exploited
In KEV
Public exploit
Fix available
Apply
aquasec
setup-trivy
,
trivy
,
aquasecurity
trivy-action
+3 more
+5 more
Trivy ecosystem supply chain briefly compromised
CVE-2026-33634
In KEV
Public exploit
Fix available
EPSS 61.5%
9.4
Critical
March 23, 2026
aquasec
trivy action
,
aquasecurity
trivy-action
+1 more
Trivy Action has a script injection via sourced env file in composite action
CVE-2026-26189
Public exploit
Fix available
5.9
Medium
February 18, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open