What known issues or CVEs have affected automated vulnerability scanning tools in DevOps pipelines over the past six months?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What known issues or CVEs have affected automated vulnerability scanning tools in DevOps pipelines over the past six months?
1 real search · 1 real-search pass
2026 vulnerability scanner DevOps pipeline security tools CVE Trivy Grype Checkov Semgrep Snyk GitLab scanner vulnerabilities April October 2026Google ↗
OBSERVED
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
Classifying 1 queries…
Searches and sources
ChatGPT1 real searches · gpt-6
2026 vulnerability scanner DevOps pipeline security tools CVE Trivy Grype Checkov Semgrep Snyk GitLab scanner vulnerabilities April October 2026 Google ↗
- Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser · CVE-2026-54448 · GitHub Advisory Database · github.com
- Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser · advisories.gitlab.io
- Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts · CVE-2026-55092 · GitHub Advisory Database · github.com
- Trivy has a path traversal via a crafted vulnerability database or other downloaded artifacts · advisories.gitlab.com
- Nuclei: Local File Read via Workflow File-Protocol Gate Bypass · advisories.gitlab.com
- Nuclei: Local File Read via Workflow File-Protocol Gate Bypass · advisories.gitlab.io
- Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode · advisories.gitlab.io
- CVE-2026-76805 · access.redhat.com
- GitLab advisory · advisories.gitlab.com
- Vulnerability scanners in 2026: revisit Trivy, Grype and OSV-Scanner before you trust another green scan · revisit.tech
- Trivy supply chain compromise: What Docker Hub users should know · docker.com
- Pipeline security lessons from March supply chain incidents · about.gitlab.com
- Guidance for detecting, investigating, and defending against the Trivy supply chain compromise · microsoft.com
- NIST National Vulnerability Database · nvd.nist.gov
- GitHub Security Advisories · github.com
- GitLab Advisory Database · advisories.gitlab.com
- CISA Known Exploited Vulnerabilities Catalog · cisa.gov
- Trivy security advisories · github.com
- Nuclei security advisories · github.com