Mmastodon TechnologyCybersecurity first seen 4 h ago, last 4 h ago, peak #5

Low-severity directory traversal flaw patched in Trivy scanner

Original: 🚨 EUVD-2026-91789 📊 Score: 2.5/10 (CVSS v3.1) 📦 Product: trivy 🏢 Vendor: aquasec 📅 Updated: 2026-10-02 📝 Trivy before 0.

A new vulnerability listing, EUVD-2026-91789, describes a directory traversal issue in Aqua Security's Trivy vulnerability scanner. Versions before 0.71.0 allow path traversal in Terraform filesystem functions that access pathnames above the scan root, with risk arising in misconfiguration scanning. The flaw carries a CVSS v3.1 score of 2.5, indicating low severity, and the advisory was updated on 2 October 2026. Users are advised to upgrade to 0.71.0 or later.

Why now: Security teams monitor new vulnerability advisories affecting widely used open-source scanning tools.

TrivyAqua SecurityEUVD-2026-91789

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 4 h ago to 4 h ago.

Evidence

• 🚨 EUVD-2026-91789 📊 Score: 2.5/10 (CVSS v3.1) 📦 Product: trivy 🏢 Vendor: aquasec 📅 Updated: 2026-10-02 📝 Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to access pathnames above the scan root. The risk occurs when using misconf… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/778554