Security Advisories for github.com/aquasecurity/trivy in go
Moderate
about 19 hours ago
Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write
go
github.com/aquasecurity/trivy
High
about 1 month ago
Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
go
github.com/aquasecurity/trivy
Critical
5 months ago
Trivy ecosystem supply chain was briefly compromised
actions, go
aquasecurity/setup-trivy, aquasecurity/trivy-action, github.com/aquasecurity/trivy
Moderate
about 2 years ago
Trivy possibly leaks registry credential when scanning images from malicious registries
go
github.com/aquasecurity/trivy