Known vulnerabilities in setup-trivy

Vendor: Aqua Security
Software: setup-trivy
Software CPE: cpe:2.3:a:aquasecurity:setup-trivy:*:*:*:*:*:*:*:*
Website: https://github.com/aquasecurity/
Total vulnerabilities: 1
Public exploits: 0
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting setup-trivy setup-trivy is affected by 1 known vulnerabilities: 1 critical Critical High Medium Low

Vulnerabilities (1)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124689 - Embedded Malicious Code
CVE-2026-33634		 CWE-506 Critical
No
Exploited
 0.2.6 30.03.2026 SB2026033044