aquasecurity/trivy-action vulnerabilities

CVEs whose affected-version data names the aquasecurity/trivy-action package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-33634CriticalCISA KEVPoC

Trivy ecosystem supply chain was briefly compromised

Trivy ecosystem supply chain was briefly compromised

▾ Hadalaquasecurity · github.com/aquasecurity/trivyEPSS 1.7%via OSV

aquasecurity/trivy-action vulnerabilities (CVEs) · VulnSea