Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-88815
hoch
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type castingBuild 07:11 UTC
CVE-2026-87114
hoch
kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudoBuild 07:11 UTC
CVE-2026-85644
hoch
perl-XS-Parse-Keyword: perl-XS-Parse-Keyword: Denial of Service via improper array reference validationBuild 07:11 UTC
CVE-2026-101894
hoch
@xhmikosr/decompress: @xhmikosr/decompress: Path traversal via symlink chainBuild 07:11 UTC
CVE-2026-93348
hoch
unsloth-zoo: unsloth: Unsloth Zoo: Arbitrary code execution via crafted model configurationBuild 07:11 UTC
GHSA-456v-xq2p-r4cj
hoch
code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)Build 07:11 UTC
CVE-2026-86330
hoch
noobaa-core: noobaa-core: OS command injection in cluster_internal_api.set_hostname_internalBuild 07:11 UTC
CVE-2026-101292
hoch
artemis-core-client: Unsafe Reflection in Apache ActiveMQ Artemis Federation Message DeserializationBuild 07:11 UTC
CVE-2026-91006
hoch
org.apache.karaf.instance/org.apache.karaf.instance.core: karaf: Apache Karaf: Arbitrary command execution via unquoted instance optionsBuild 07:11 UTC
CVE-2026-94286
hoch
libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parserBuild 07:11 UTC
CVE-2026-101015
hoch
opendmarc: OpenDMARC: DMARC policy bypass via Unicode dot character equivalence in policy.c Domain HandlerBuild 07:11 UTC
CVE-2026-101014
hoch
opendmarc: OpenDMARC: Denial of Service via off-by-one error in opendmarc_util_cleanupBuild 07:11 UTC
CVE-2026-100888
hoch
A weakness has been identified in Trusted Domain Project OpenDKIM up t ...Build 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.