Attestkeep
Sprache: Deutsch
Loslegen
Schwachstellen

Kritische Schwachstellen, die das Gate schon kennt.

Alle sechs Stunden holt Attestkeep die Trivy Vulnerability Database, dieselbe, die der Scanner in Ihrem Cluster liest. Das sind die Einträge, die die Database diese Woche als kritisch eingestuft hat, und wann. Nicht, wann die Nachricht kam: wann das Gate es wusste.

Database zuletzt aktualisiert27. Okt. 2026, 19:17 UTC
29kritisch, letzte 7 Tage411hoch, letzte 7 Tage649mittel, letzte 7 Tage145niedrig, letzte 7 Tage
IDSchwachstelleEingestuft seitVeröffentlicht
CVE-2026-98980
hoch		In the Linux kernel, the following vulnerability has been resolved: n ...Build 19:10 UTC
CVE-2026-98968
hoch		In the Linux kernel, the following vulnerability has been resolved: a ...Build 19:10 UTC
CVE-2026-98964
hoch		In the Linux kernel, the following vulnerability has been resolved: n ...Build 19:10 UTC
CVE-2026-98952
hoch		In the Linux kernel, the following vulnerability has been resolved: p ...Build 19:10 UTC
CVE-2026-98945
hoch		In the Linux kernel, the following vulnerability has been resolved: H ...Build 19:10 UTC
CVE-2026-98944
hoch		In the Linux kernel, the following vulnerability has been resolved: H ...Build 19:10 UTC
CVE-2026-98927
hoch		In the Linux kernel, the following vulnerability has been resolved: K ...Build 19:10 UTC
CVE-2026-98899
hoch		In the Linux kernel, the following vulnerability has been resolved: n ...Build 19:10 UTC
CVE-2026-101025
hoch		Description NGINX JavaScript (njs) has a vulnerability where the bui ...Build 07:10 UTC
CVE-2026-101019
hoch		Description NGINX JavaScript (njs) has a vulnerability where the njs X ...Build 07:10 UTC
CVE-2026-95394
hoch		Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...Build 07:10 UTC
CVE-2026-15957
hoch		Smithy-RS is a Rust code generation and runtime framework that ge ...Build 07:10 UTC
CVE-2026-104269
hoch		[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]Build 07:10 UTC
CVE-2026-16271
hoch		[hw/display/qxl: validate primary surface stride against width]Build 07:10 UTC
CVE-2026-17588
hoch		[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]Build 07:10 UTC
CVE-2026-63321
hoch		Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemuBuild 07:10 UTC
CVE-2026-66899
hoch		[virtio-balloon: fix free-page BH teardown on unrealize]Build 07:10 UTC
CVE-2026-66900
hoch		[hw/net/virtio-net: strip trailing padding when caching RSC segment]Build 07:10 UTC
CVE-2026-77913
hoch		[hw/display/vga: fix text-mode OOB write after a graphics surface switch]Build 07:10 UTC
CVE-2026-84788
hoch		[io/channel-socket: do not treat a zero length write as an error]Build 07:10 UTC
SUSE-SU-2026:4890-1
hoch		Security update for cpupowerBuild 19:09 UTC
SUSE-SU-2026:4891-1
hoch		Security update for aws-iam-authenticatorBuild 19:09 UTC
SUSE-SU-2026:4892-1
hoch		Security update for the Linux KernelBuild 19:09 UTC
SUSE-SU-2026:4893-1
hoch		Security update for emacsBuild 19:09 UTC
SUSE-SU-2026:4895-1
hoch		Security update for gimpBuild 19:09 UTC
SUSE-SU-2026:4897-1
hoch		Security update for cifs-utilsBuild 19:09 UTC
openSUSE-SU-2026:12233-1
hoch		ca-certificates-mozilla-2.92-2.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12235-1
hoch		containerized-data-importer1.65-api-1.65.0-4.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12238-1
hoch		gitoxide-0.61.0-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12239-1
hoch		go1.27-1.27.3-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12240-1
hoch		google-guest-agent-20261015.00-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12241-1
hoch		kubevirt1.8-container-disk-1.8.4-7.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12242-1
hoch		kubevirt1.9-container-disk-1.9.1-2.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12253-1
hoch		tekton-cli-0.46.2-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12255-1
hoch		tomcat10-10.1.61-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12256-1
hoch		tomcat11-11.0.27-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:12258-1
hoch		zk-0.15.7-1.1 on GA mediaBuild 19:09 UTC
openSUSE-SU-2026:22151-1
hoch		Security update for php8Build 19:09 UTC
openSUSE-SU-2026:22152-1
hoch		Security update for go1.26Build 19:09 UTC
openSUSE-SU-2026:22153-1
hoch		Security update for go1.27Build 19:09 UTC
openSUSE-SU-2026:22155-1
hoch		Security update for cpupowerBuild 19:09 UTC
CVE-2026-115895
hoch		happy-dom: happy-dom: Arbitrary code execution via unvalidated ECMAScript Module import aliasBuild 07:11 UTC
GHSA-f2hq-32vh-53cc
hoch		postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded wordsBuild 07:11 UTC
CVE-2026-115778
hoch		twisted: twisted: Denial of Service via memory exhaustion during Telnet negotiationBuild 07:11 UTC
CVE-2026-115776
hoch		twisted: Twisted: Denial of Service via unbounded IRC bufferBuild 07:11 UTC
CVE-2026-115775
hoch		twisted: twisted: Denial of Service via memory exhaustion in XML stream parserBuild 07:11 UTC
GHSA-q54r-jf2p-rfr2
hoch		gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()Build 07:11 UTC
GHSA-9969-6676-49h5
hoch		Echo: WebSocket proxy can retain connections and handlers after client disconnectBuild 07:11 UTC
GHSA-h7wr-284f-5qvc
hoch		Echo: Decompress permits unbounded gzip expansion in v4Build 07:11 UTC
GHSA-f48p-c9v4-h7xv
hoch		Echo: BodyDump captures request and response bodies without size limits in v4Build 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.