{"items":[{"id":"NVI-00016454","kind":"vulnerability","title":"Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-mcj4-mphf-j9ff","CVE-2026-55092"],"plain_summary":"GitHub lists this reviewed advisory for github.com/aquasecurity/trivy. Published version ranges and source prerequisites are shown below; this is not an inspection of a visitor’s application.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-72786bf894d4c757c73edb150ec61d6c"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-08-25T17:33:03.000Z","value":"7.5 high","meaning":"GitHub source severity; exploitability and local consequence require separate evidence.","source_id":"sr-72786bf894d4c757c73edb150ec61d6c"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-72786bf894d4c757c73edb150ec61d6c","url":"https://github.com/advisories/GHSA-mcj4-mphf-j9ff","basis":"vendor_advisory","notes":"GitHub Advisory Database; CC-BY-4.0. Each advisory links its original attribution. Null normalizes fields.","title":"GHSA-mcj4-mphf-j9ff","publisher":"GitHub Advisory Database","observed_at":"2026-11-02T09:56:37.775Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-72786bf894d4c757c73edb150ec61d6c"],"technology":"github.com/aquasecurity/trivy","known_exclusions":[],"conditions_summary":"## Summary\n\nWhen Trivy downloads an OCI artifact, it uses the `org.opencontainers.image.title` annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a crafted annotation that resolves to a path outside the intended destination, causing Trivy to write the layer content to an arbitrary location on the host filesystem.\n\n## Affected configurations\n\nExploitation requires the attacker to direct Trivy at an attacker-controlled OCI artifact via one of the following inputs:\n\n| Input | Used for |\n| --- | --- |\n| `--db-repository` flag, `TRIVY_DB_REPOSITORY` environment variable, or `db.repository` in `trivy.yaml` | Vulnerability database |\n| `--java-db-repository` flag, `TRIVY_JAVA_DB_REPOSITORY` environment variable, or `db.java-repository` in `trivy.yaml` | Java vulnerability database |\n| `--checks-bundle-repository` flag (and the deprecated `--policy-bundle-repository` alias), `TRIVY_CHECKS_BUNDLE_REPOSITORY` environment variable, or `misconfiguration.checks-bundle-repository` in `trivy.yaml` | Misconfiguration checks bundle |\n| Repository argument to `trivy module install <REPO","public_affected_ranges":["< 0.71.1"]}],"null_published_at":"2026-11-04T10:04:35.891Z","source_updated_at":"2026-08-25T17:33:03.000Z","source_disclosed_at":"2026-08-25T17:33:02.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-11-02T09:56:37.775Z"}],"next_cursor":null,"snapshot_revision":"42594"}