CVE-2026-54448: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
When Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer.
References
- github.com/advisories/GHSA-q3fv-x8vg-qqm4
- github.com/aquasecurity/trivy/commit/441251e51ae46cbcf7f436547e0a5766b25328b4
- github.com/aquasecurity/trivy/pull/10718
- github.com/aquasecurity/trivy/releases/tag/v0.71.0
- github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4
- nvd.nist.gov/vuln/detail/CVE-2026-54448
Code Behaviors & Features
Detect and mitigate CVE-2026-54448 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →