poetry

Aug 14, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Aug 3, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Jun 30, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Jun 19, 2026 GO-2026-4919 +1 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

Jun 10, 2026 GO-2026-4919 +1 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

Jun 1, 2026 GO-2026-4919 +2 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 17, 2026 GO-2026-4919 +3 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 4, 2026 GO-2026-4919 +3 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 3, 2026 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 1, 2026 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Feb 5, 2026 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jan 30, 2026 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Dec 17, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Dec 3, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Dec 2, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Oct 10, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Oct 9, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Sep 30, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Sep 2, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 31, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 3, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 1, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 29, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 6, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 30, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 18, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 28, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 5, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Feb 5, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jan 30, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jan 14, 2025 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Dec 24, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Dec 3, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Nov 18, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Nov 1, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Oct 10, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Oct 3, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Oct 3, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Sep 17, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Sep 12, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Sep 3, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 31, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 31, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jul 1, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jun 14, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Jun 10, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Changes in this version

+ func NormalizePkgName(name string) string

Jun 3, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 24, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 24, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 20, 2024 GO-2026-5983 +2 more

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 4, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

May 3, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 24, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 24, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 22, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 27, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 19, 2024 GO-2024-2870 +3 more

  GO-2024-2870: Credential leakage in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Changes in this version

+ func NewParser() types.Parser

+ type Lockfile struct

+ Packages []struct{ ... }

+ type Parser struct

+ func (p *Parser) Parse(r xio.ReadSeekerAt) ([]types.Library, []types.Dependency, error)