Vulnerabilities

TI-2026-39311 CVE-2026-54448 · GHSA-q3fv-x8vg-qqm4

Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

MEDIUM 64

Trivy is a security scanner.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00443 Published 2026-06-25 Fixed in 0.71.0 CWE-770

TI-2026-39796 CVE-2026-55092 · GHSA-mcj4-mphf-j9ff

LOW 31

Trivy is a security scanner.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00442 Published 2026-06-25 Fixed in 0.71.1 CWE-22

TI-2026-26015 CVE-2026-33634 · GHSA-69fq-xp46-6x23

CRITICAL 100KEV

Trivy is a security scanner.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.59727 Published 2026-03-23 Fixed in 0.2.6, 0.35.0 CWE-506