Vendors / Aquasecurity

Aquasecurity vulnerabilities being exploited

1 Aquasecurity flaw was confirmed exploited in the wild in the past 365 days, across 1 product: Trivy. If you run any of them, patch these first.

Added	Exploited vulnerability	Fix by
2026-03-26	CVE-2026-33634 Trivy Aquasecurity Trivy Embedded Malicious Code Vulnerability Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.	2026-04-09

Watch my Aquasecurity software Scan a website All vendors

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.