Skip to content
OpenAdvisories

Package · Go

github.com/aquasecurity/trivy

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.0
    CVE-2026-55092

    Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts

    Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attack…

    aquasecurity trivy github.com/aquasecurity/trivy Go