CVE security advisories and vulnerability history for github.com/aquasecurity/trivy by aquasecurity.
Last updated
aquasecurity github.com/aquasecurity/trivy has 5 published CVE records since 2024, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.
This page aggregates every publicly disclosed vulnerability (CVE) affecting aquasecurity github.com/aquasecurity/trivy, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
How the CVSS severity of aquasecurity github.com/aquasecurity/trivy's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
In CISA’s Known Exploited Vulnerabilities catalog
1
One of aquasecurity github.com/aquasecurity/trivy's CVEs is confirmed exploited in the wild.
Public exploits
2
2 of aquasecurity github.com/aquasecurity/trivy's CVEs have a known public exploit available.
Browse every aquasecurity github.com/aquasecurity/trivy version named in a CVE, then pick one to see only the CVEs that affect it.
5 CVEs
Added to CISA KEV 2026-03-26
The CWE weakness categories most often found in aquasecurity github.com/aquasecurity/trivy CVEs. Follow any weakness for its full explanation.
How many aquasecurity github.com/aquasecurity/trivy CVEs were published each year.
Browse vulnerabilities for other products by aquasecurity.
Common questions about aquasecurity github.com/aquasecurity/trivy vulnerabilities.
Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.
Monitor new aquasecurity github.com/aquasecurity/trivy vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.
