Skip to content

Aquasecurity Trivy-action vulnerabilities

aquasec setup-trivy, trivy, aquasecurity trivy-action +3 more +5 moreTrivy ecosystem supply chain briefly compromisedCVE-2026-33634In KEVPublic exploitFix availableEPSS 60.4%9.4 CriticalMarch 23, 2026
aquasec trivy action, aquasecurity trivy-action +1 moreTrivy Action has a script injection via sourced env file in composite actionCVE-2026-26189Public exploitFix available5.9 MediumFebruary 18, 2026