trivy-operator

Direct Vulnerabilities

Known vulnerabilities in the trivy-operator package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • L
Improper Authorization

<0.30.1-r2
  • L
GHSA-p77j-4mvh-x3m3

<0.30.1-r2
  • L
CVE-2026-27141

<0.30.1-r1
  • L
GHSA-8fj7-8h3w-xwfm

<0.30.1-r1
  • H
CVE-2025-15558

<0.30.0-r6
  • L
GHSA-p436-gjf2-799p

<0.30.0-r6
  • L
GHSA-j5w8-q4qc-rx2x

<0.29.0-r4
  • M
Directory Traversal

<0.29.0-r9
  • L
Algorithmic Complexity

<0.29.0-r1
  • H
Incorrect Execution-Assigned Permissions

<0.29.0-r3
  • L
GHSA-9gcr-gp5f-jw27

<0.29.0-r1
  • L
GHSA-cxq7-xw9v-rcv3

<0.29.0-r1
  • L
Race Condition

<0.28.0-r0
  • L
CVE-2025-47912

<0.29.0-r1
  • L
GHSA-jwmf-chvc-rf92

<0.29.0-r1
  • L
GHSA-fv92-fjc5-jj9h

<0.27.1-r1
  • L
CVE-2025-58181

<0.29.0-r4
  • L
Untrusted Search Path

<0.30.0-r1
  • L
GHSA-wcw9-47fp-rrfr

<0.29.0-r1
  • L
GHSA-hjx7-fpxx-mj48

<0.29.0-r1
  • L
GHSA-cgrx-mc8f-2prm

<0.29.0-r2
  • L
CVE-2025-58183

<0.29.0-r1
  • L
GHSA-37cx-329c-33x3

<0.29.0-r10
  • L
GHSA-846p-jg2w-w324

<0.29.0-r9
  • L
Server-Side Request Forgery (SSRF)

<0.29.0-r7
  • L
Directory Traversal

<0.29.0-r8
  • L
GHSA-q9hv-hpm4-hj6x

<0.30.0-r2
  • H
Reachable Assertion

<0.29.0-r9
  • H
Improper Verification of Cryptographic Signature

<0.29.0-r9
  • L
Information Exposure Through Log Files

<0.29.0-r1
  • L
GHSA-9h84-qmv7-982p

<0.28.0-r1
  • L
Allocation of Resources Without Limits or Throttling

<0.29.0-r1
  • L
GHSA-447v-2qg4-h8hc

<0.29.0-r1
  • L
Improper Certificate Validation

<0.29.0-r1
  • L
GHSA-4c4x-jm2x-pf9j

<0.29.0-r7
  • L
GHSA-7wwx-xj66-r44x

<0.29.0-r1
  • L
CVE-2025-58186

<0.29.0-r1
  • L
GHSA-j5pm-7495-qmr3

<0.28.0-r0
  • L
Allocation of Resources Without Limits or Throttling

<0.29.0-r1
  • C
CVE-2026-1229

<0.30.0-r2
  • L
GHSA-9h8m-3fm2-qjrq

<0.30.0-r1
  • L
GHSA-frhw-mqj2-wxw2

<0.29.0-r1
  • L
CVE-2025-61725

<0.29.0-r1
  • L
GHSA-273p-m2cw-6833

<0.29.0-r7
  • L
Allocation of Resources Without Limits or Throttling

<0.28.0-r3
  • L
GHSA-fcv2-xgw5-pqxf

<0.29.0-r8
  • L
GHSA-jqc5-w2xx-5vq4

<0.29.0-r9
  • L
GHSA-wjrx-6529-hcj3

<0.28.0-r1
  • L
GHSA-fphv-w9fq-2525

<0.29.0-r9
  • L
NULL Pointer Dereference

<0.29.0-r7
  • M
Improper Validation of Integrity Check Value

<0.29.0-r10
  • L
CVE-2025-8959

<0.28.0-r1
  • L
Allocation of Resources Without Limits or Throttling

<0.29.0-r1
  • L
GHSA-rjcg-56ph-3qvg

<0.29.0-r1
  • L
GHSA-jc7w-c686-c4v9

<0.28.0-r3
  • L
GHSA-qh38-484v-w52x

<0.29.0-r1
  • L
Use of Uninitialized Resource

<0.28.0-r1
  • L
Allocation of Resources Without Limits or Throttling

<0.28.0-r1
  • L
GHSA-f9f8-9pmf-xv68

<0.28.0-r1
  • L
GHSA-pwhc-rpq9-4c8w

<0.29.0-r3
  • M
Memory Leak

<0.29.0-r3
  • H
Symlink Following

<0.29.0-r2
  • L
GHSA-m6hq-p25p-ffr2

<0.29.0-r3