Home / SECURITY / Trivy / v0.71.1
Trivy v0.71.1stable Released Jun 15, 2026
Impact Score: 5/10

Trivy v0.71.1 — Release Notes & Engineering Impact

Source available — automated, not human-reviewed

Component: trivy · Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified — check source notes
📄 .MD
🔧 Bug Fixes 4
⚡ Executive Summary (TL;DR)

Trivy v0.71.1. Source highlight: 164b383121351c2d49c5d354c2245719d972752b release: v0.71.1 [release/v0.71] (#10818)

Visit Trivy Official Site ↗ Official Release Source ↗ All Trivy Releases 📡 Trivy RSS
Who Does This Impact? (Role-Based Analysis)

💻 Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

📊 Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

⚙️ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

🔧 Bug Fixes & Patches (4)

  • a72d9a4d997c25fbb6534e231b4e206c9b202b31 fix(oci): validate artifact filename
  • 3dd98471dfbbc4a95edd5cd866468d3a8c87fd17 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825)
  • a62cbe40a240d3a3f568401b8a5f86e14114e371 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821)
  • 43d1d2628725e913db110b89419f0bebd36f58a8 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812)
📄 View Raw Release Notes (Original Developer Log)
## Changelog * 164b383121351c2d49c5d354c2245719d972752b release: v0.71.1 [release/v0.71] (#10818) * a72d9a4d997c25fbb6534e231b4e206c9b202b31 fix(oci): validate artifact filename * 3dd98471dfbbc4a95edd5cd866468d3a8c87fd17 fix: forward ospkg detector options through ospkg.NewScanner [backport: release/v0.71] (#10825) * a62cbe40a240d3a3f568401b8a5f86e14114e371 fix(vex): load VEX documents from within the repository directory [backport: release/v0.71] (#10821) * 43d1d2628725e913db110b89419f0bebd36f58a8 fix: surface the original analysis error instead of context cancellation [backport: release/v0.71] (#10812) * ac7696c7b50d633183ce2ff44898d4b5c6eae565 ci: expect GitHub App bot as backport PR author [backport: release/v0.71] (#10815)
← Older Version Trivy v0.71.0