TR
Product
trivy
by aquasecurity · last CVE Aug 18, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch

Add trivy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-63328
6.8
0%
Aug 18
Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write
Affected: < 0.72.0
CVE-2026-54448
6.5
0%
Jun 25
Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
Affected: < 0.71.0
Showing 2