Jamesgol

**Name of the Vulnerable Software and Affected Versions** Trivy versions prior to 0.71.0 **Description** A security scanner issue occurs when processing Helm chart archives (.tgz). The custom tar unpacker uses the `io.ReadAll(tr)` function without a size limit. An attacker can provide a specially crafted compressed archive that expands to a massive size upon decompression, leading to an Out-of-Memory (OOM) condition where the operating system terminates the process. **Recommendations** Update to version 0.71.0.

**Name of the Vulnerable Software and Affected Versions** WooCommerce Store Toolkit plugin versions prior to 1.5.7 **Description** The issue allows for privilege escalation. **Recommendations** For versions prior to 1.5.7, update to version 1.5.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WooCommerce Store Toolkit plugin versions prior to 1.5.8 **Description** The issue allows for privilege escalation. **Recommendations** For versions prior to 1.5.8, update to version 1.5.8 or later to resolve the issue.