How many aquasecurity trivy-vscode-extension CVEs are in CISA KEV?

None of aquasecurity trivy-vscode-extension's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of aquasecurity trivy-vscode-extension are affected?

1 distinct aquasecurity trivy-vscode-extension version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in aquasecurity trivy-vscode-extension CVEs?

aquasecurity trivy-vscode-extension's CVEs most often map to these CWE weakness types: CWE-506 (Embedded Malicious Code).

What is the average severity of aquasecurity trivy-vscode-extension CVEs?

The average CVSS base score across aquasecurity trivy-vscode-extension's scored CVEs is 10.0.

RadicalNotion.AI

Log in Start free

aquasecurity

1 CVEs

aquasecurity trivy-vscode-extension Vulnerabilities

Name: aquasecurity trivy-vscode-extension vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for trivy-vscode-extension by aquasecurity.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

10.0

Avg CVSS

2026–2026

Last updated March 5, 2026

Overview

aquasecurity trivy-vscode-extension has 1 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 10.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting aquasecurity trivy-vscode-extension, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of aquasecurity trivy-vscode-extension's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of aquasecurity trivy-vscode-extension's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No aquasecurity trivy-vscode-extension CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every aquasecurity trivy-vscode-extension version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

1.8.12 <= v <= 1.8.121 CVE

Find a version

1 CVE

Sort

Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension Release
CVE-2026-28353CWE-506
Critical · CVSS 10.0
EPSS 0.5% (38th pct)2026-03-05

Common weakness types

The CWE weakness categories most often found in aquasecurity trivy-vscode-extension CVEs. Follow any weakness for its full explanation.

CWE-506Embedded Malicious Code1 CVE

Other aquasecurity products

Browse vulnerabilities for other products by aquasecurity.

github.com/aquasecurity/trivy5 CVEs trivy5 CVEs aquasecurity/trivy-action2 CVEs trivy-action2 CVEs aquasecurity/setup-trivy1 CVEs setup-trivy1 CVEs

All aquasecurity vulnerabilities

Frequently asked questions

Common questions about aquasecurity trivy-vscode-extension vulnerabilities.

How many CVEs does aquasecurity trivy-vscode-extension have?: aquasecurity trivy-vscode-extension has 1 published CVE records since 2026.
How many aquasecurity trivy-vscode-extension CVEs are in CISA KEV?: None of aquasecurity trivy-vscode-extension's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for aquasecurity trivy-vscode-extension vulnerabilities?: No aquasecurity trivy-vscode-extension CVEs currently have a tracked public exploit in this dataset.
Which versions of aquasecurity trivy-vscode-extension are affected?: 1 distinct aquasecurity trivy-vscode-extension version is named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in aquasecurity trivy-vscode-extension CVEs?: aquasecurity trivy-vscode-extension's CVEs most often map to these CWE weakness types: CWE-506 (Embedded Malicious Code).
How many critical aquasecurity trivy-vscode-extension vulnerabilities are there?: aquasecurity trivy-vscode-extension has 1 critical and 0 high-severity CVEs.
What is the average severity of aquasecurity trivy-vscode-extension CVEs?: The average CVSS base score across aquasecurity trivy-vscode-extension's scored CVEs is 10.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track aquasecurity trivy-vscode-extension vulnerabilities

Monitor new aquasecurity trivy-vscode-extension vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing