Skip to content
OpenAdvisories

Package · Wolfi

trivy-operator

107 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

43 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-58058

    github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives

    xz is a pure golang package for reading and writing xz-compressed files. Prior to version 0.5.14, it is possible to put data in front of an LZMA-encoded byte stream without detecting the situation while reading the header. This can lead to increased memory co…

    ulikunitz xz zot zarf Debian Ubuntu Azure Linux Wolfi Go
  • Medium 6.5
    CVE-2025-55198

    Helm May Panic Due To Incorrect YAML Content

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, when parsing Chart.yaml and index.yaml files, an improper validation of type error can lead to a panic. This issue has been resolved in Helm 3.18.5. A workaround involves ensuring Y…

    helm helm zot kubescape Azure Linux Wolfi Go
  • Medium 6.5
    CVE-2025-55199

    Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion

    Helm is a package manager for Charts for Kubernetes. Prior to version 3.18.5, it is possible to craft a JSON Schema file in a manner which could cause Helm to use all available memory and have an out of memory (OOM) termination. This issue has been resolved i…

    helm helm zot kubescape Azure Linux Wolfi Go