github.com/aquasecurity/trivy
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Trivy ecosystem supply chain was briefly compromised | aquasecurity/setup-trivyaquasecurity/trivy-action | GitHub ActionsGo | Critical | Fix reported | |
| Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts | github.com/aquasecurity/trivy | Go | High | Fix reported | |
| Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write | github.com/aquasecurity/trivy | Go | Medium | Fix reported | |
| Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser | github.com/aquasecurity/trivy | Go | High | Fix reported | |
| Trivy possibly leaks registry credential when scanning images from malicious registries | github.com/aquasecurity/trivy | Go | Medium | Fix reported |