pylock

Aug 14, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Aug 3, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Jun 30, 2026 GO-2026-4919

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

Jun 19, 2026 GO-2026-4919 +1 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

Jun 10, 2026 GO-2026-4919 +1 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

Jun 1, 2026 GO-2026-4919 +2 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Apr 17, 2026 GO-2026-4919 +3 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Mar 4, 2026 GO-2026-4919 +3 more

  GO-2026-4919: Trivy ecosystem supply chain was briefly compromised in github.com/aquasecurity/trivy

  GO-2026-5983: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser in github.com/aquasecurity/trivy

  GO-2026-6250: Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy

  GO-2026-6294: Path traversal via crafted vulnerability database or other downloaded artifacts in github.com/aquasecurity/trivy

Changes in this version

+ type Dependency struct

+ Name string

+ Version string

+ type Directory struct

+ Path string

+ type Package struct

+ Dependencies []Dependency

+ Directory Directory

+ Name string

+ Version string

+ type Parser struct

+ func NewParser() *Parser

+ func (p *Parser) Parse(_ context.Context, r xio.ReadSeekerAt) ([]ftypes.Package, []ftypes.Dependency, error)

+ type Pylock struct

+ Packages []Package