Security1 hOctober 25, 2026, 19:54

Trivy 0.76.1 blocks TLS spoofing after eMudhra intermediate CA key compromise

Trivy v0.76.1 addresses TLS interception risk following the eMudhra intermediate CA key compromise (CVE-2026-111943). The scanner is built with Go 1.27.3, which hard-rejects the compromised chain, and its Alpine image ships an updated trust store.

DEV Community

Open source

Trivy 0.76.1 blocks TLS spoofing after eMudhra intermediate CA key compromise

CVE-2026-111943 stems from the eMudhra intermediate CA key compromise
Go 1.27.3 in Trivy rejects the compromised chain via crypto/x509
The Alpine image updates ca-certificates to distrust the certificates
Pinning an immutable image digest instead of latest is recommended

#Trivy#AquaSecurity#Go

eMudhra's eight compromised intermediates expose non-browser TLS clients

Security

Go ships emergency update blocking eight intermediate CA keys

Software

Firefox 158.0.1 Blocks Compromised eMudhra Intermediate Certificates

Security

Trivy 0.76.1 blocks TLS spoofing after eMudhra intermediate CA key compromise

eMudhra's eight compromised intermediates expose non-browser TLS clients

Go ships emergency update blocking eight intermediate CA keys

Firefox 158.0.1 Blocks Compromised eMudhra Intermediate Certificates

LiteLLM supply chain backdoor: malicious 1.82.7 and 1.82.8 on PyPI