Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-101333
mittel
keycloak-services: keycloak-services: Unbounded metric series creation via idp tag on broker login endpointBuild 07:11 UTC
CVE-2026-19444
mittel
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on WindowsBuild 07:11 UTC
CVE-2026-94287
mittel
libXpm: libXpm: Denial of Service via unsigned integer underflowBuild 07:11 UTC
CVE-2026-94285
mittel
libX11: libX11: Denial of Service via out-of-bounds read in byte-oriented codeset parserBuild 07:11 UTC
CVE-2026-94284
mittel
libX11: libX11: Denial of Service via out-of-bounds read in XIM trigger-key registration parserBuild 07:11 UTC
CVE-2026-94283
mittel
libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parserBuild 07:11 UTC
CVE-2026-94282
mittel
libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processingBuild 07:11 UTC
CVE-2026-101017
mittel
opendmarc: OpenDMARC: Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.cBuild 07:11 UTC
CVE-2026-101016
mittel
opendmarc: OpenDMARC: Improper policy enforcement via malformed DMARC record tagsBuild 07:11 UTC
CVE-2026-101003
mittel
mongoose: mongoose: Denial of Service via stack-based buffer overflow in MQTT brokerBuild 07:11 UTC
CVE-2026-96281
mittel
flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimesBuild 07:11 UTC
CVE-2026-96280
mittel
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systemsBuild 07:11 UTC
CVE-2026-96279
mittel
flatpak: flatpak: Path traversal issue in OCI archive extraction via hardlinksBuild 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.