https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 16:23:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-15349 bdu:2026-15349 https://cve.radiocsirt.org/vuln/bdu:2026-15349 https://cve.radiocsirt.org/vuln/euvd-2026-330383 EUVD-2026-330383 https://cve.radiocsirt.org/vuln/euvd-2026-330383 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54448 <p>Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer. This vulnerability is fixed in 0.71.0.</p> <p>Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer. This vulnerability is fixed in 0.71.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54448 https://cve.radiocsirt.org/vuln/ghsa-q3fv-x8vg-qqm4 <p><strong>Affected:</strong> Go: github.com/aquasecurity/trivy</p> <p>## Summary</p> <p>When Trivy scans a Helm chart archive (`.tgz`), its custom tar unpacker reads each entry with `io.ReadAll(tr)` and no size limit. An attacker who can place a malicious `.tgz` file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer.</p> <p>## Affected configurations</p> <p>Exploitation requires the attacker to place a crafted `.tgz` file in a location that Trivy will scan as a Helm chart. This applies to the following scan targets:</p> <p>| Command | Condition | | --- | --- | | `trivy config &lt;dir&gt;` | Directory contains a crafted `.tgz` Helm chart (misconfiguration scanning is always enabled) | | `trivy filesystem --scanners misconf &lt;dir&gt;` | Directory contains a crafted `.tgz` Helm chart **and** `--scanners misconf` is explicitly enabled | | `trivy image --scanners misconf &lt;image&gt;` | Image contains a crafted `.tgz` Helm chart **and** `--scanners misconf` is explicitly enabled |</p> <p>Realistic scenarios include: - A CI pipeline that runs `trivy config .` on a repository where a contributor can submit a pull request containing a crafted chart archive. - A pipeline that scans a container image with `--scanners misconf`, whose build context includes untrusted `.tgz` files.</p> <p>## Impact</p> <p>An attacker who satisfies the conditions above can exhaust all available memory on the host running Trivy. The OS OOM killer will terminate the Trivy process and may affect other processes sharing the same host or…</p> <p><strong>Affected:</strong> Go: github.com/aquasecurity/trivy</p> <p>## Summary</p> <p>When Trivy scans a Helm chart archive (`.tgz`), its custom tar unpacker reads each entry with `io.ReadAll(tr)` and no size limit. An attacker who can place a malicious `.tgz` file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer.</p> <p>## Affected configurations</p> <p>Exploitation requires the attacker to place a crafted `.tgz` file in a location that Trivy will scan as a Helm chart. This applies to the following scan targets:</p> <p>| Command | Condition | | --- | --- | | `trivy config &lt;dir&gt;` | Directory contains a crafted `.tgz` Helm chart (misconfiguration scanning is always enabled) | | `trivy filesystem --scanners misconf &lt;dir&gt;` | Directory contains a crafted `.tgz` Helm chart **and** `--scanners misconf` is explicitly enabled | | `trivy image --scanners misconf &lt;image&gt;` | Image contains a crafted `.tgz` Helm chart **and** `--scanners misconf` is explicitly enabled |</p> <p>Realistic scenarios include: - A CI pipeline that runs `trivy config .` on a repository where a contributor can submit a pull request containing a crafted chart archive. - A pipeline that scans a container image with `--scanners misconf`, whose build context includes untrusted `.tgz` files.</p> <p>## Impact</p> <p>An attacker who satisfies the conditions above can exhaust all available memory on the host running Trivy. The OS OOM killer will terminate the Trivy process and may affect other processes sharing the same host or…</p> https://cve.radiocsirt.org/vuln/ghsa-q3fv-x8vg-qqm4 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11162-1 <p>trivy-0.71.2-2.1 on GA media</p> <p>trivy-0.71.2-2.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11162-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2082 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Aqua Security Trivy ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Aqua Security Trivy ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2082