trivy
- Software type
- Vulnerability scanner
- Total vulnerabilities (90 days)
- 1
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, trivy recorded 1 security vulnerability in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of trivy and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-63328Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File WriteCVE-2026-55092Trivy: Path traversal via a crafted vulnerability database or other downloaded artifactsCVE-2026-54448Unbounded Helm archive extraction can exhaust memory in Aqua Security TrivyCVE-2026-33634Trivy ecosystem supply chain briefly compromisedCVE-2024-35192Trivy possibly leaks registry credential when scanning images from malicious registries| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-63328Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write | Exploitation statusNot exploited | FixYes | Published08/18/2026 | SeverityMedium |
CVE-2026-55092Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts | Exploitation statusNot exploited | FixYes | Published06/25/2026 | SeverityHigh |
CVE-2026-54448Unbounded Helm archive extraction can exhaust memory in Aqua Security Trivy | Exploitation statusActively exploited | FixYes | Published06/25/2026 | SeverityMedium |
CVE-2026-33634Trivy ecosystem supply chain briefly compromised | Exploitation statusKEV | FixNo | Published03/23/2026 | SeverityCritical |
CVE-2024-35192Trivy possibly leaks registry credential when scanning images from malicious registries | Exploitation statusNot exploited | FixYes | Published05/20/2024 | SeverityMedium |
5 Results | Page 1 of 1