high8.7
CVE-2026-54448
Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
Impact
Trivy is a security scanner. Prior to 0.71.0, when Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer. This vulnerability is fixed in 0.71.0.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/aquasecurity/trivy | < 0.71.0 | 0.71.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aquasec | Trivy | before 0.71.0 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-q3fv-x8vg-qqm4
- https://github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4
- https://nvd.nist.gov/vuln/detail/CVE-2026-54448
- https://github.com/aquasecurity/trivy/pull/10718
- https://github.com/aquasecurity/trivy/commit/441251e51ae46cbcf7f436547e0a5766b25328b4
- https://github.com/aquasecurity/trivy/releases/tag/v0.71.0