trivy-0.71.2-1.1 on GA media (moderate)

trivy-0.71.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11102-1 Rating: moderate Cross-References: CVE-2026-47262 CVE-2026-50195 CVE-2026-53488 CVE-2026-53489 CVE-2026-53492 CVSS scores: CVE-2026-47262 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-50195 SUSE : 8.8...

CVE-2026-55092

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a...

CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-54448

CVE-2026-54448 affects Trivy. Prior to version 0.71.0, its Helm chart scanner uses a custom tar unpacker that reads each archive entry with io.ReadAll(tr) without a size limit, enabling a malicious .tgz to decompress to gigabytes and trigger the OS OOM killer. This could cause the Trivy process t...

CVE-2026-54448 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-54448

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-54448 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-54448 Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser

Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive .tgz, its custom tar unpacker reads each entry with io.ReadAlltr and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to...

CVE-2026-55092

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a...

CVE-2026-55092 Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a...

CVE-2026-55092

Trivy before 0.71.1 vulnerable to path traversal when downloading OCI artifacts: the org.opencontainers.image.title annotation from the artifact manifest is used as the destination filename without validation, allowing writing layer content to arbitrary locations on the host filesystem. Impact is...

CVE-2026-55092 Trivy: Path traversal via a crafted vulnerability database or other downloaded artifacts

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a...

PT-2026-52498

Name of the Vulnerable Software and Affected Versions Trivy versions prior to 0.71.0 Description A security scanner issue occurs when processing Helm chart archives .tgz. The custom tar unpacker uses the io.ReadAlltr function without a size limit. An attacker can provide a specially crafted...

CVE-2026-53492 vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

GHSA-33VJ-92QQ-66HC vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

GHSA-RGH6-RFWX-V388 vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

CVE-2026-50195 vulnerabilities

Vulnerabilities for packages: containerd, rancher, crossplane, kubevela-fips, kubescape-server, tekton-pipelines, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, tekton-pipelines-fips,...

CVE-2026-53488 vulnerabilities

Vulnerabilities for packages: rancher, crossplane, kubevela-fips, kubescape-server, docker-cli-buildx, grype-db, envoy-gateway-fips, gitlab-rails-ce, syft-fips, eksctl, chartmuseum-fips, chaos-mesh, docker, kargo, grype-fips, tigera-operator, xeol-fips, cluster-api-helm-controller-fips,...