Vulnerabilities in aquasecurity
7 resultsCVE-2026-33634CRITICALTrivy ecosystem supply chain briefly compromisedEPSS 59.7%KEVCVE-2026-26189MEDIUMTrivy Action has a script injection via sourced env file in composite actionEPSS 1.5%CVE-2026-28353CRITICALTrivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension ReleaseEPSS 0.5%CVE-2026-54448MEDIUMTrivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parserEPSS 0.4%CVE-2026-55092HIGHTrivy: Path traversal via a crafted vulnerability database or other downloaded artifactsEPSS 0.4%CVE-2026-63328MEDIUMTrivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File WriteEPSS 0.2%CVE-2024-35192MEDIUMTrivy possibly leaks registry credential when scanning images from malicious registriesEPSS 0.2%