What’s Vulnerable › Products

aquasecurity trivy-action vulnerabilities

2 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your aquasecurity trivy-action version is affected

Exploited aquasecurity trivy-action vulnerabilities

• CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability

Latest aquasecurity trivy-action vulnerabilities

• CVE-2026-33634 — Aquasecurity Trivy Embedded Malicious Code Vulnerability (CVSS 8.8) — exploited
• CVE-2026-26189 — Trivy Action has a script injection via sourced env file in composite action (CVSS 8.1)