Search results

Improve Go vulnerability coverage: use both GHSA and go-vulndb for third-party modules

Status: Open.

#675 In aquasecurity/trivy-db;

· DmitriyLewen opened on Jun 15, 2026

Missing CVE-2026-27143 <> https://pkg.go.dev/vuln/GO-2026-4868

Status: Open.

#665 In aquasecurity/trivy-db;

· dor-hayun opened on May 16, 2026

No database-updates since 4 days

Status: Open.

#660 In aquasecurity/trivy-db;

· alexgit2k opened on Apr 20, 2026

Trivy DB build Workflow Failing.

Status: Open.

#658 In aquasecurity/trivy-db;

· steviegs opened on Apr 17, 2026

Inconsistent severity priority: Severity field uses CVSS-first, VendorSeverity uses advisory-first

Status: Open.

Bug

#650 In aquasecurity/trivy-db;

· DmitriyLewen opened on Mar 19, 2026

Incorrect GHSA CVSS score for CVE-2025-55754 (9.7 instead of 2.1)

Status: Open.

#634 In aquasecurity/trivy-db;

· bwang-heeler opened on Feb 12, 2026

bug(ubuntu): missed some advisries for end of * releases

bugSomething isn't workingSomething isn't working

Status: Open.

Bug

#600 In aquasecurity/trivy-db;

· DmitriyLewen opened on Dec 10, 2025

trivy-db is missing cvss data provided by ghsa.

Status: Open.

#596 In aquasecurity/trivy-db;

· manojkrishnanomula opened on Dec 1, 2025

Clarification on CVSS Data Source in Trivy DB

Status: Open.

#575 In aquasecurity/trivy-db;

· dor-hayun opened on Sep 28, 2025

npm supply chain major hack - most vulnerable packages are not included

Status: Open.

#573 In aquasecurity/trivy-db;

· strajansebastian opened on Sep 15, 2025

False Positive CVE-2020-26217 in Java XStream version 1.4.14

Status: Open.

#569 In aquasecurity/trivy-db;

· manojkrishnanomula opened on Sep 2, 2025

Affected versions are wrong for CVE's in maven::GitHub Security Advisory Maven bucket.

Status: Open.

#567 In aquasecurity/trivy-db;

· manojkrishnanomula opened on Aug 20, 2025