Setup Trivy

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-33634 Mar 23, 21:47 Go CRITICAL POC KEV PATCH THREAT GHSA Emergency

Trivy security scanner v0.69.4 was compromised in a supply chain attack where a threat actor used stolen credentials to publish malicious releases and force-push credential-stealing malware to GitHub Actions repositories.

Information Disclosure Trivy Action Setup Trivy Trivy Suse +1

NVD GitHub VulDB

CVSS 4.0

9.4

EPSS

0.0%

Threat

4.9

CVE-2026-33634 Go

EPSS 0% 4.9 CVSS 9.4

CRITICAL POC KEV PATCH THREAT Emergency

Trivy security scanner v0.69.4 was compromised in a supply chain attack where a threat actor used stolen credentials to publish malicious releases and force-push credential-stealing malware to GitHub Actions repositories.

Information Disclosure Trivy Action Setup Trivy +3

NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy