# Trivy ecosystem supply chain was briefly compromised

Advisory record · `GHSA-69fq-xp46-6x23`

- **Identifiers:** `GHSA-69fq-xp46-6x23` · `CVE-2026-33634` · `GO-2026-4919`
- **State:** Confirmed
- **Severity:** CVSS 9.4 Critical
- **Critical:** Yes: KEV, CVSS 9+, CVSS 7+ and EPSS
- **Weakness (CWE):** [CWE-506](https://cwe.mitre.org/data/definitions/506.html)
- **Tags:** [CWE-506](https://agentprime.io/advisories/tag/cwe-506.md)
- **Published:** 24 Mar 2026
- **Updated:** 10 Sept 2026
- **Reviewed by a person:** No

Published by the GitHub Advisory Database at 24 Mar 2026, 17:53 UTC. agentprime has not analysed this yet, so whether it affects any app is not known.

## Critical

Critical, because:

- In CISA’s KEV catalogue since 26 Mar 2026: it is known to be exploited.
- CVSS score 9.4: 9.0 or more.
- CVSS score 9.4 (7.0 or more) and EPSS 0.60 (0.1 or more): a high score and a real chance of exploitation in the next 30 days.

How we decide what’s critical: <https://agentprime.io/advisories/critical.md>

## Affected packages

- `github.com/aquasecurity/trivy` (Go): affected `=0.69.4`; no fixed version yet

## Not analysed yet

We haven’t published our analysis of this Advisory yet. Once a person has reviewed it, this page will say what’s vulnerable, what has to be true for your app to be affected, and how to check.

## Severity and exploitation

- 9.4 Critical, CVSS 4.0: `CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H`, from CNA (GitHub_M)

- **CISA KEV:** Listed since 26 Mar 2026: known to be exploited.
- **EPSS:** 0.60, the 99th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

- 31 Oct 2026, 14:13 UTC: First seen by agentprime
- 31 Oct 2026, 14:13 UTC: [Confirmed by OSV](https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23)

## Sources

- [GitHub Advisory Database: GHSA-69fq-xp46-6x23](https://github.com/advisories/GHSA-69fq-xp46-6x23)
- [OSV: GHSA-69fq-xp46-6x23](https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23)
- <https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23>
- <https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc>
- <https://nvd.nist.gov/vuln/detail/CVE-2026-33634>
- <https://github.com/BerriAI/litellm/issues/24518>
- <https://github.com/BerriAI/litellm/issues/24518#issuecomment-4127436387>
- <https://docs.litellm.ai/blog/security-update-march-2026>
- <https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack>
- <https://github.com/aquasecurity/trivy>
- <https://github.com/aquasecurity/trivy/discussions/10425>
- <https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml>
- <https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130>
- <https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1>

Facts on this page come from the GitHub Advisory Database (CC-BY 4.0), OSV and the other sources listed, as published. We don’t reproduce full advisory descriptions, which can contain exploit code.

## Check whether this affects you

A Match means an installed version is in the affected range above. Most don’t affect the app; agentprime hasn’t analysed this one yet.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), ask your agent to check the project: `check_lockfile` sends a lockfile, `check_packages` a list of installed packages, and both return the Matches and the upgrades that clear them. `get_advisory` returns this record. Setup: <https://agentprime.io/mcp.md>
- In a browser: <https://agentprime.io/check/> reads your lockfile in the browser, never uploading it.
- Whether it touches your code, with file and line: the Claude Code plugin, <https://agentprime.io/plugin.md>
- As JSON: <https://api.agentprime.io/v1/advisories/GHSA-69fq-xp46-6x23>, or `POST https://api.agentprime.io/v1/match` with your packages (<https://agentprime.io/api.md>)

---

The web page: <https://agentprime.io/advisories/GHSA-69fq-xp46-6x23/>. Everything for agents: <https://agentprime.io/llms.txt>.