Aaquasecurity

Products

Exploited and recent CVEs

• CVE-2026-33634 Critical 9.4 Exploited Trivy ecosystem supply chain briefly compromised 59.7%
• CVE-2026-33634 Critical 9.4 Exploited Trivy ecosystem supply chain briefly compromised 59.7%
• CVE-2026-33634 Critical 9.4 Exploited Trivy ecosystem supply chain briefly compromised 59.7%
• CVE-2026-63328 Medium 6.8 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write 0.2%
• CVE-2026-54448 Medium 6.9 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser 0.4%
• CVE-2026-55092 High 7.0 Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts 0.4%
• CVE-2026-28353 Critical 10.0 Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release 0.5%
• CVE-2026-26189 Medium 5.9 Trivy Action has a script injection via sourced env file in composite action 1.5%
• CVE-2024-35192 Medium 5.5 Trivy possibly leaks registry credential when scanning images from malicious registries 0.2%