diff --git a/vhdbuilder/packer/trivy-scan.sh b/vhdbuilder/packer/trivy-scan.sh
index 42f301f326b..f7fcbed596b 100644
--- a/vhdbuilder/packer/trivy-scan.sh
+++ b/vhdbuilder/packer/trivy-scan.sh
@@ -9,13 +9,13 @@ CVE_LIST_QUERY_OUTPUT_PATH=${TRIVY_REPORT_DIRNAME}/cve-list.txt
 TRIVY_DB_REPOSITORIES="mcr.microsoft.com/mirror/ghcr/aquasecurity/trivy-db:2,ghcr.io/aquasecurity/trivy-db:2,public.ecr.aws/aquasecurity/trivy-db"
 
 # renovate: datasource=custom.deb2004 depName=trivy versioning=deb
-TRIVY_DEB_2004_VERSION="0.70.0-ubuntu20.04u9"
+TRIVY_DEB_2004_VERSION="0.70.0-ubuntu20.04u11"
 
 # renovate: datasource=custom.deb2204 depName=trivy versioning=deb
-TRIVY_DEB_2204_VERSION="0.70.0-ubuntu22.04u9"
+TRIVY_DEB_2204_VERSION="0.70.0-ubuntu22.04u11"
 
 # renovate: datasource=custom.deb2404 depName=trivy versioning=deb
-TRIVY_DEB_2404_VERSION="0.70.0-ubuntu24.04u9"
+TRIVY_DEB_2404_VERSION="0.70.0-ubuntu24.04u11"
 
 # renovate: datasource=rpm depName=trivy registryUrl=https://packages.microsoft.com/azurelinux/3.0/prod/cloud-native/x86_64/repodata
 TRIVY_RPM_VERSION="0.70.0-9.azl3"