Issues

• Build the DB every hour instead of every 6 hours

  aquasecurity/trivy-db#706 · Filter by author marek-mraz opened on Oct 24, 2026
  1

• A CVE listed under more than one secfixes version gets a random FixedVersion

  aquasecurity/trivy-db#699 · Filter by author cleanstart-community-admin opened on Oct 16, 2026

• Version the tool / Add releases

  aquasecurity/trivy-db#681 · Filter by author scraly opened on Jul 1, 2026

• Improve Go vulnerability coverage: use both GHSA and go-vulndb for third-party modules

  aquasecurity/trivy-db#675 · Filter by author DmitriyLewen opened on Jun 15, 2026
  3

• Missing CVE-2026-27143 <> https://pkg.go.dev/vuln/GO-2026-4868

  aquasecurity/trivy-db#665 · Filter by author dor-hayun opened on May 16, 2026
  3

• No database-updates since 4 days

  aquasecurity/trivy-db#660 · Filter by author alexgit2k opened on Apr 20, 2026
  1

• Trivy DB build Workflow Failing.

  aquasecurity/trivy-db#658 · Filter by author steviegs opened on Apr 17, 2026
  1

• Inconsistent severity priority: Severity field uses CVSS-first, VendorSeverity uses advisory-first

  Bug

  aquasecurity/trivy-db#650 · Filter by author DmitriyLewen opened on Mar 19, 2026
  

• Incorrect GHSA CVSS score for CVE-2025-55754 (9.7 instead of 2.1)

  aquasecurity/trivy-db#634 · Filter by author bwang-heeler opened on Feb 12, 2026
  2

• bug(ubuntu): missed some advisries for end of * releases

  bug
  Bug

  aquasecurity/trivy-db#600 · Filter by author DmitriyLewen opened on Dec 10, 2025
  16

  

• trivy-db is missing cvss data provided by ghsa.

  aquasecurity/trivy-db#596 · Filter by author manojkrishnanomula opened on Dec 1, 2025
  1

• Clarification on CVSS Data Source in Trivy DB

  aquasecurity/trivy-db#575 · Filter by author dor-hayun opened on Sep 28, 2025

• npm supply chain major hack - most vulnerable packages are not included

  aquasecurity/trivy-db#573 · Filter by author strajansebastian opened on Sep 15, 2025
  1

• False Positive CVE-2020-26217 in Java XStream version 1.4.14

  aquasecurity/trivy-db#569 · Filter by author manojkrishnanomula opened on Sep 2, 2025
  3

• Affected versions are wrong for CVE's in maven::GitHub Security Advisory Maven bucket.

  aquasecurity/trivy-db#567 · Filter by author manojkrishnanomula opened on Aug 20, 2025
  1

• False Positive CVE-2025-26646 in msbuild

  aquasecurity/trivy-db#544 · Filter by author mjwrona opened on Jun 19, 2025
  6

• Include EUVD (European Union Vulnerability Database) as source

  aquasecurity/trivy-db#531 · Filter by author davideiori1 opened on May 23, 2025
  9

• Unable to download database from private organization repository (failed to download vulnerability DB: database download error: oci download error: failed to create a temp file)

  aquasecurity/trivy-db#477 · Filter by author darkcyber opened on Dec 14, 2024
  1

• How to interface trivy.db externally using python?

  aquasecurity/trivy-db#463 · Filter by author morpheuslord opened on Nov 2, 2024
  5

• How to publish trivy-db to a private repository?

  aquasecurity/trivy-db#447 · Filter by author brauznitz-ww opened on Oct 4, 2024
  2

• Run Trivy Vulnerability scanner github actions runs are flaky and failing some times

  aquasecurity/trivy-db#439 · Filter by author yalamarthisr opened on Sep 19, 2024

• Trivydb is missing CVE-2024-41110

  aquasecurity/trivy-db#424 · Filter by author jiridudekusy opened on Jul 27, 2024
  1

• Trivy support in archlinux - but not present in db

  aquasecurity/trivy-db#421 · Filter by author pat-mccoy-1 opened on Jul 11, 2024
  1

• Doc: Link to Oras CLI is broken in Readme

  aquasecurity/trivy-db#402 · Filter by author GavinColwell opened on May 30, 2024
  1

• Question: Edit trivy.db

  aquasecurity/trivy-db#393 · Filter by author rahilwala opened on Mar 19, 2024