aquasecurity trivy

• CVE-2026-33634 Critical 9.4 Exploited Trivy ecosystem supply chain briefly compromised 59.7%
• CVE-2026-63328 Medium 6.8 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write 0.2%
• CVE-2026-54448 Medium 6.9 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser 0.4%
• CVE-2026-55092 High 7.0 Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts 0.4%
• CVE-2024-35192 Medium 5.5 Trivy possibly leaks registry credential when scanning images from malicious registries 0.2%