Vendor
Aquasecurity
- CVEs tracked · all time
- 2
- in CISA KEV · all time
- 1
- articles · since 11 Sep
- 0
- articles · all time
- 11
No articles in the last 45 daysThe latest: SANS ISC, Wed 8 Apr, 17:41 UTC.See the full timeline
Products: Trivy
CVEs
2 CVEsCVE-2026-33634Aquasecurity Trivy Embedded Malicious Code VulnerabilityCVSS9.4CriticalExploited1.8%EPSS10articles
CVE-2026-28353Trivy Vulnerability Scanner: Unauthorized AI Agent Execution Code Included in OpenVSX Extension ReleaseCVSSUnrated–Not in KEV0.5%EPSS1article
- TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google GTIG Tracks TeamPCP as UNC6780, and CISA KEV Deadline Arrives with No Standalone Advisory, (Wed, Apr 8th)SANS ISC
- TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sportradar Details Emerge, and Mandiant Quantifies Campaign at 1,000+ SaaS Environments, (Fri, Apr 3rd)SANS ISC
- 10 Layers Deep: How StepSecurity Stops TeamPCP's Trivy Supply Chain Attack on GitHub ActionsStepSecurity
- TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Runs Dual Ransomware Operations, and AstraZeneca Data Released, (Mon, Mar 30th)SANS ISC
- TeamPCP Supply Chain Campaign: Update 003 - Operational Tempo Shift as Campaign Enters Monetization Phase With No New Compromises in 48 Hours, (Sat, Mar 28th)SANS ISC
- U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs
- CISA Adds CVE-2026-33634 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)SANS ISC
- CISA Adds CVE-2026-33634 to Known Exploited Vulnerabilities CatalogueCISA · official notice
- TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI CredentialsThe Hacker News
- Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer SecretsThe Hacker News · first in our coverage