AQ
Vendor
aquasecurity
8
CVEs
3
On KEV
0
New 30D
Products
TR8.8
trivy
aquasecurity
4 CVEs1 on KEV0 new
TR8.8
trivy-action
aquasecurity
2 CVEs1 on KEV0 new
SE8.8
setup-trivy
aquasecurity
1 CVEs1 on KEV0 new
TR10.0
trivy-vscode-extension
aquasecurity
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-63328 | TR trivy aquasecurity | 6.8 | Aug 18 | Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write |
| CVE-2026-54448 | TR trivy aquasecurity | 6.5 | Jun 25 | Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser |
| CVE-2026-55092 | TR trivy aquasecurity | 7.5 | Jun 25 | Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts |
| CVE-2026-33634 In wildKEV | TR trivy-action aquasecurity | 8.8 | Mar 23 | Trivy ecosystem supply chain briefly compromised |
| CVE-2026-28353 | TR trivy-vscode-extension aquasecurity | 10.0 | Mar 5 | Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release |
| CVE-2026-26189 | TR trivy-action aquasecurity | 8.1 | Feb 19 | Trivy Action has a script injection via sourced env file in composite action |