OPENSUSE-SU-2024:14183-1 trivy-0.53.0-1.1 on GA media

These are all security issues fixed in the trivy-0.53.0-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot...

GHSA-3669-72X9-R9P3 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, harbor-scanner-trivy, zot...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy, zot...

CVE-2024-37298 vulnerabilities

Vulnerabilities for packages: harbor-scanner-trivy-fips, harbor-scanner-trivy, zot...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: tfsec, zot, terraform, snyk-cli, terragrunt, k9s, trivy, tflint, wolfictl, zarf, kubescape, grype, conftest, kots...

GHSA-XFHP-JF8P-MH5W vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, grype, trivy, kots, k9s, trivy-fips, zot, kubescape, conftest, snyk-cli, tflint, tfsec, conftest-fips, wolfictl, terraform...

CVE-2024-6257 vulnerabilities

Vulnerabilities for packages: zarf, terragrunt, grype, trivy, kots, k9s, trivy-fips, zot, kubescape, conftest, snyk-cli, tflint, tfsec, conftest-fips, wolfictl, terraform...

OPENSUSE-SU-2024:14030-1 trivy-0.52.0-1.1 on GA media

These are all security issues fixed in the trivy-0.52.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11619-1 trivy-0.20.2-1.1 on GA media

These are all security issues fixed in the trivy-0.20.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12102-1 trivy-0.28.0-1.1 on GA media

These are all security issues fixed in the trivy-0.28.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12008-1 trivy-0.26.0-1.1 on GA media

These are all security issues fixed in the trivy-0.26.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12205-1 trivy-0.30.2-1.1 on GA media

These are all security issues fixed in the trivy-0.30.2-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12692-1 trivy-0.37.3-1.1 on GA media

These are all security issues fixed in the trivy-0.37.3-1.1 package on the GA media of openSUSE Tumbleweed...

GHSA-M5VV-6R4H-3VJ9 vulnerabilities

Vulnerabilities for packages: argo-events, vault, tekton-chains-fips, timestamp-authority, thanos, secrets-store-csi-driver-provider-azure, tkn-fips, cortex, falcoctl, loki, fluent-bit-plugin-loki, py3-azure-identity, fulcio-fips, rekor-fips, request-1276, argo-events-fips, step-fips,...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flux, flyte, sops, argo-events, py3-cassandra-medusa, grafana-mimir, goreleaser, k8sgpt, sqlpad, wal-g, tekton-chains, pulumi, airflow, buildkitd, restic, falcoctl, guac, opentelemetry-collector-contrib, chezmoi, rekor, cortex, nuclei, thanos, zot, terragrunt,...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: nri-f5, paranoia, temporal-ui-server-fips, snyk-cli, tekton-chains-fips, thanos, secrets-store-csi-driver-provider-azure, wireguard-go, cortex, fluent-bit-plugin-loki, age, mc, sigstore-scaffolding-fips, prometheus-elasticsearch-exporter-fips,...

Aqua Security Trivy < 0.51.2 Credential Leak (GHSA-xcq4-m2r3-cmrj)

The version of Aqua Security Trivy installed on the remote host is prior to 0.51.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-xcq4-m2r3-cmrj advisory. - If a malicious actor is able to trigger Trivy to scan container images from a crafted malicious registry, it could...

Aqua Security Trivy Installed (Linux / Unix)

Binary data aquasecuritytrivynixinstalled.nbin...

GO-2024-2870 Credential leakage in github.com/aquasecurity/trivy

A malicious registry can cause Trivy to leak credentials for legitimate registries such as AWS Elastic Container Registry ECR, Google Cloud Artifact/Container Registry, or Azure Container Registry ACR if the registry is scanned from directly using Trivy. These tokens can then be used to push/pull...