pkg:Go/github.com/aquasecurity/trivy

All known vulnerabilities

• —CVE-2026-33634⚠ KEVTrivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy
• —CVE-2026-33634⚠ KEVTrivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy
  >= 0.69.4
• MEDIUM5.5CVE-2024-35192Credential leakage in github.com/aquasecurity/trivy
  from 0, < 0.51.2
• MEDIUM5.5Credential leakage in github.com/aquasecurity/trivy
  from 0, < 0.51.2
• —Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
  from 0, < 0.71.0