Go/github.com/aquasecurity/trivy CVE-2026-63328: unknown, EPSS 0.19%
Trivy Plugin Manager has Path Traversal that Allows Arbitrary File Write in github.com/aquasecurity/trivy
Action: Upgrade github.com/aquasecurity/trivy to 0.72.0 or later.
go get github.com/aquasecurity/trivy@v0.72.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.72.0 | - |
Fixed versions
| 0.72.0 |
Sources
- osv: GO-2026-6250
- https://github.com/aquasecurity/trivy/security/advisories/GHSA-8rc5-4fr6-64pw
- https://github.com/aquasecurity/trivy/commit/d4213d7735c74e57f06c02ccb39ebca67abc7959
- https://github.com/aquasecurity/trivy/releases/tag/v0.72.0
CVE-2026-63328 · published · modified · JSON