CVE-2026-54448: Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser
When Trivy scans a Helm chart archive (.tgz), its custom tar unpacker reads each entry with io.ReadAll(tr) and no size limit. An attacker who can place a malicious .tgz file in the scanned path can craft a small compressed archive that decompresses to gigabytes, causing the Trivy process to be killed by the OS OOM killer.
References
- github.com/advisories/GHSA-q3fv-x8vg-qqm4
- github.com/aquasecurity/trivy/commit/441251e51ae46cbcf7f436547e0a5766b25328b4
- github.com/aquasecurity/trivy/pull/10718
- github.com/aquasecurity/trivy/releases/tag/v0.71.0
- github.com/aquasecurity/trivy/security/advisories/GHSA-q3fv-x8vg-qqm4
- nvd.nist.gov/vuln/detail/CVE-2026-54448
Code Behaviors & Features
Detect and mitigate CVE-2026-54448 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →