en
Aqua Security is a cloud native security provider that develops a cloud native application protection platform for enterprise workloads. Founded in 2015, it operates from Boston and Ramat Gan, Israel, and maintains Trivy and related open-source security tooling.
As of 11/09/2026, aquasecurity recorded 1 security vulnerabilities in the last 90 days across 1 products, including 0 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, trivy had the most security vulnerabilities in the aquasecurity ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-63328Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File WriteCVE-2026-55092Trivy: Path traversal via a crafted vulnerability database or other downloaded artifactsCVE-2026-54448Unbounded Helm archive extraction can exhaust memory in Aqua Security TrivyCVE-2026-33634Trivy ecosystem supply chain briefly compromisedCVE-2026-28353Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release7 Results | Page 1 of 1
| SeverityHigh |
| SeverityMedium |
| SeverityCritical |
| SeverityCritical |
| SeverityMedium |
| SeverityMedium |