github.com/aquasecurity/trivy
Go · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| Trivy ecosystem supply chain was briefly compromised | aquasecurity/setup-trivyaquasecurity/trivy-action | GitHub ActionsGo | بحرانی | اصلاح گزارش شده | |
| Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts | github.com/aquasecurity/trivy | Go | زیاد | اصلاح گزارش شده | |
| Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write | github.com/aquasecurity/trivy | Go | متوسط | اصلاح گزارش شده | |
| Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser | github.com/aquasecurity/trivy | Go | زیاد | اصلاح گزارش شده | |
| Trivy possibly leaks registry credential when scanning images from malicious registries | github.com/aquasecurity/trivy | Go | متوسط | اصلاح گزارش شده |