Attestkeep
Sprache: Deutsch
Loslegen
Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert28. Okt. 2026, 01:21 UTC
27kritisch, letzte 7 Tage324hoch, letzte 7 Tage661mittel, letzte 7 Tage104niedrig, letzte 7 Tage
IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-116172
mittel		vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interfaceBuild 07:15 UTC
CVE-2026-116155
mittel		ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leakBuild 07:15 UTC
CVE-2026-116154
mittel		ImageMagick: ImageMagick: Denial of Service via XML parsing memory leakBuild 07:15 UTC
CVE-2026-116141
mittel		ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoderBuild 07:15 UTC
CVE-2026-80905
mittel		kernel: net: tap: fix wrong transport_header when sending VLAN-tagged frameBuild 07:15 UTC
CVE-2026-80887
mittel		kernel: drm/vmwgfx: use check_add_overflow for shader size+offset boundBuild 07:15 UTC
CVE-2026-80883
mittel		kernel: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registeredBuild 07:15 UTC
CVE-2026-72262
mittel		kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/getBuild 07:15 UTC
CVE-2026-93453
mittel		SOGo before 5.12.11 constructs password-reset links using the client-s ...Build 19:10 UTC
CVE-2024-56830
mittel		The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builti ...Build 19:10 UTC
CVE-2024-31837
mittel		DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string ...Build 19:10 UTC
CVE-2026-96405
mittel		NLnet Labs Unbound up to and including version 1.26.1 limits compressi ...Build 07:10 UTC
CVE-2026-50106
mittel		When NLnet Labs Unbound up to and including version 1.26.1 is configur ...Build 07:10 UTC
CVE-2026-35501
mittel		When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is co ...Build 07:10 UTC
CVE-2026-109125
mittel		In NLnet Labs Unbound up to and including version 1.26.1, an observabl ...Build 07:10 UTC
CVE-2026-101283
mittel		iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflo ...Build 07:10 UTC
CVE-2026-63318
mittel		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)Build 07:10 UTC
CVE-2026-65928
mittel		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)Build 07:10 UTC
CVE-2026-98867
mittel		kernel: dm-pcache: bound the logical key offset from persistent memoryBuild 19:09 UTC
CVE-2026-98865
mittel		kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock heldBuild 19:09 UTC
CVE-2026-89810
mittel		kernel: drm/amdkfd: Fix error path at svm_migrate_copy_to_ramBuild 19:09 UTC
CVE-2026-80891
mittel		kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pagesBuild 19:09 UTC
openSUSE-SU-2026:12231-1
mittel		bind-9.20.30-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12232-1
mittel		brotli-1.2.1-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12234-1
mittel		chromedriver-156.0.8078.47-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12236-1
mittel		docker-compose-5.6.1-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12237-1
mittel		git-lfs-3.8.1-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12243-1
mittel		libsndfile-devel-1.2.2-7.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12244-1
mittel		libtirpc-devel-1.3.8-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12245-1
mittel		libmariadbd-devel-12.3.2-3.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12246-1
mittel		mihomo-1.19.33-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12247-1
mittel		nano-9.3-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12248-1
mittel		corepack24-24.22.1-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12249-1
mittel		libopenscap33-1.4.6-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12250-1
mittel		perl-Mozilla-CA-20261020.0.0-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12251-1
mittel		python313-Pillow-13.0.0-2.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12252-1
mittel		libruby4_0-4_0-4.0.9-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12254-1
mittel		tomcat-9.0.123-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12257-1
mittel		libunbound8-1.26.2-1.1 on GA mediaBuild 19:09 UTC
CVE-2026-76654
mittel		kubelet: kubelet: Subpath symlinking on Windows nodes permits NTLM coercionBuild 07:11 UTC
CVE-2026-2270
mittel		kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationBuild 07:11 UTC
CVE-2026-115897
mittel		serialize-javascript: serialize-javascript: Cross-Site Scripting via improper function escapingBuild 07:11 UTC
CVE-2026-115892
mittel		wasmtime: Wasmtime: Denial of Service via missing payload type validation in guest returnsBuild 07:11 UTC
CVE-2026-115886
mittel		mlflow: mlflow: Server-Side Request Forgery via insecure scorer deserializationBuild 07:11 UTC
CVE-2026-115883
mittel		LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesBuild 07:11 UTC
GHSA-8c8m-p3m8-cjg8
mittel		Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipientBuild 07:11 UTC
GHSA-m943-m63m-w62w
mittel		Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipientBuild 07:11 UTC
GHSA-85x2-q946-cp5h
mittel		Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not nameBuild 07:11 UTC
GHSA-7xgj-8392-5q4r
mittel		FastMCP: Post-transform component authorization is skipped on direct callsBuild 07:11 UTC
GHSA-vqqp-x5qm-5qp4
mittel		FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization serverBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.