Known vulnerabilities in aquasecurity trivy-action
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-33634 | Exploited Aquasecurity Trivy Embedded Malicious Code Vulnerability | 9.4 Critical | Mar 23, 2026 |
| CVE-2026-26189 | Trivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities | 5.9 Medium | Feb 19, 2026 |