Attestkeep
Idioma: Español
Registrarse
Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

Última actualización de la database27 oct 2026, 13:12 UTC
23crítica, últimos 7 días298alta, últimos 7 días633media, últimos 7 días139baja, últimos 7 días
IDVulnerabilidadFuente de la severidad / ecosistemasCrítica desdePublicada
CVE-2026-99083
crítica		kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate()linuxRed HatRed Hat 9.8debian, echobuild de las 07:13 UTC
GHSA-xgh2-jgvm-8g78
crítica		Unsigned ID tokens (alg none) accepted, allowing authentication bypass in the id_token flowomniauth_oidcRuby Advisory DBrubygemsbuild de las 19:14 UTC
CVE-2026-99078
crítica		In the Linux kernel, the following vulnerability has been resolved: n ...linux, bpftool, kernel6.12 y 7 másPhoton OSPhoton OS, debian, rapidfort amazon linuxbuild de las 19:10 UTC
CVE-2026-98959
crítica		In the Linux kernel, the following vulnerability has been resolved: b ...linux, bpftool, kernel6.12 y 7 másPhoton OSPhoton OS, debian, rapidfort amazon linux, echobuild de las 19:10 UTC
CVE-2026-115889
crítica		Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, th ...rust-wasmtime, wasmtimeGHSAGHSA 10.0debian, rapidfort debian, cargo, echobuild de las 07:11 UTC
GHSA-cxf3-9h37-7rr8
crítica		Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsgithub.com/labstack/echo/v4, github.com/labstack/echo/v5GHSAGHSA 9.1gobuild de las 07:11 UTC
CVE-2026-57116
crítica		PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocationpraisonaiGHSAGHSA 9.8pipbuild de las 07:11 UTC
CVE-2026-114612
crítica		litellm: LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyRed HatRed Hat 8.8build de las 07:11 UTC
CVE-2026-97631
crítica		edk2: Pre-boot RCE in EDK II PXE driveredk2, edk2-tools, edk2-aarch64 y 4 másRed HatRed Hat 8.8rapidfort alma, rapidfort Oracle Linux, rapidfort Red Hat, Red Hat, rapidfort fedora +4build de las 07:11 UTC
GHSA-673q-mjm6-r5xr
crítica		Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arraysnext, @seal-security/nextGHSAGHSA 9.5seal npm, echo npm, npmbuild de las 07:11 UTC
GHSA-cg2g-xh64-v4q7
crítica		DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modesdompurify, @seal-security/dompurifyGHSAGHSA 9.2seal npm, echo npm, npmbuild de las 07:11 UTC
GHSA-2464-fhr4-w9xw
crítica		Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are usednext, @seal-security/nextGHSAGHSA 9.5seal npm, echo npm, npmbuild de las 07:11 UTC
GHSA-9v8h-qqgm-4m35
crítica		Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packagebrotli, brotlicffiGHSAGHSA 9.2pipbuild de las 07:11 UTC
CVE-2026-115324
crítica		mem0ai Databricks vector store vulnerable to SQL injectionmem0aiGHSAGHSA 9.2pipbuild de las 07:11 UTC
CVE-2026-91403
crítica		OpenJDK: Distrust eMudhra intermediate CA certificates due to security concernsjava-21-openjdk, java-21-openjdk-devel, java-21-openjdk-headless y 140 másRed HatRed Hat 6.8rapidfort alma, Red Hat, amazon linux, rapidfort amazon linux, rapidfort Red Hat +4build de las 07:11 UTC
CVE-2026-114509
crítica		Laravel TokenGuard authentication bypass through non-string API credentialslaravel/frameworkGHSAGHSA 9.2composerbuild de las 07:11 UTC
CVE-2026-96639
crítica		Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-fr ...pillow, nemo-gym, nemo-rl-cuda-13.0 y 3 másGHSAGHSA 9.8chainguard, debian, rapidfort debian, echo, echo pip +1build de las 07:11 UTC
CVE-2026-114406
crítica		ca-certificates: Distrust eMudhra intermediate CA certificates due to security concernsca-certificates, rf-ca-certificates, openshift/ose-rhel-coreos-8 y 1 másRed Hat, AlmaLinux, Oracle, Rocky LinuxRed Hat 6.8rapidfort rocky, Red Hat, alma, rocky, Oracle Linux +4build de las 07:11 UTC
CVE-2026-114139
crítica		Sentry-Javascript: Middleware Bypass when using Tunnel route@sentry/nextjs, langfuse-3, langfuse-4 y 3 másGHSAGHSA 9.1chainguard, echo npm, npm, wolfibuild de las 07:11 UTC
CVE-2026-109618
crítica		php: OOM bailout during request parsing leads to memory corruption and RCEphp, php-bcmath, php-cli y 529 másNVD, Azure Linux, Bitnami, UbuntuNVD 9.8alma, amazon linux, rocky, rapidfort amazon linux, rapidfort alma +16build de las 07:11 UTC
CVE-2026-71195
crítica		manila: manila: Public Manila Share Allows Cross-Project Access-Rule and Export-Metadata Writesmanila, openstack-manila, openstack-manila-share y 3 másRed HatRed Hat 8.8Red Hat, debian, rapidfort debian, echobuild de las 07:11 UTC
GHSA-hq85-5cpj-mr62
crítica		uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromiseduv, python3-uvGHSAGHSA 9.1rapidfort alpine, rapidfort Oracle Linux, rapidfort fedora, pipbuild de las 07:11 UTC
GHSA-6q48-6c7w-9gw2
crítica		certifi bundles emSign root CAs with compromised intermediate CA keyspython3-certifi, certifi, python-certifiGHSAGHSA 9.1rapidfort fedora, rapidfort Oracle Linux, echo pip, pipbuild de las 07:11 UTC
CVE-2026-112900
crítica		Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...pillow, open-webui, py3-pillow y 9 másGHSA, BitnamiGHSA 9.2chainguard, debian, rapidfort debian, seal pip, wolfi +5build de las 07:11 UTC
CVE-2026-112403
crítica		Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ...pillow, gftools, kserve y 29 másGHSA, BitnamiGHSA 9.2chainguard, wolfi, debian, rapidfort debian, seal pip +4build de las 07:11 UTC
CVE-2026-112398
crítica		Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix ...pillow, nemo-skills, python-pillow y 1 másGHSA, BitnamiGHSA 9.2debian, rapidfort debian, seal pip, bitnami, chainguard +4build de las 07:11 UTC
CVE-2026-112393
crítica		Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow ha ...pillow, open-webui, py3-pillow y 9 másNVD, GHSA, BitnamiNVD 9.8chainguard, debian, rapidfort debian, seal pip, wolfi +5build de las 07:11 UTC
CVE-2026-111058
crítica		Mercury: Unauthenticated Remote Code Execution via /api/kernelsmercuryGHSAGHSA 9.8pipbuild de las 07:11 UTC
CVE-2026-111057
crítica		Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassmercuryGHSAGHSA 10.0pipbuild de las 07:11 UTC
CVE-2026-96620
crítica		Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Executionclaude-agent-sdkGHSAGHSA 9.2pipbuild de las 07:11 UTC
CVE-2026-111375
crítica		freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window titlefreerdp, freerdp-devel, freerdp-libs y 6 másNVDNVD 9.1rapidfort alma, rapidfort rocky, rapidfort Oracle Linux, rapidfort Red Hat, Red Hat +6build de las 07:11 UTC
CVE-2026-57496
crítica		netlicensing-mcp: REST Path Traversal Bypasses Token Redactionnetlicensing-mcpGHSAGHSA 9.6pipbuild de las 07:11 UTC
CVE-2026-109829
crítica		undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect cachingnode-undici, nodejs24, nodejs24-devel y 47 másNVDNVD 9.1Red Hat, rapidfort Oracle Linux, rapidfort Red Hat, rapidfort alma, amazon linux +7build de las 07:11 UTC
CVE-2026-109383
crítica		undici: undici: Certificate validation bypass via dropped TLS options in Agentnode-undici, nodejs24, nodejs24-devel y 57 másNVDNVD 9.1Red Hat, amazon linux, rapidfort amazon linux, rapidfort Oracle Linux, rapidfort Red Hat +7build de las 07:11 UTC
CVE-2026-110858
crítica		GitPython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecpython-git, gitpython, python-gitpython y 4 másRed HatRed Hat 8.1Red Hat, debian, rapidfort debian, seal pip, echobuild de las 07:11 UTC
CVE-2026-102748
crítica		Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Servicegithub.com/dgraph-io/dgraph/v25GHSAGHSA 9.2gobuild de las 07:11 UTC
CVE-2026-73802
crítica		gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabledgitea, gitea-fips, gitea.com/gitea/runnerGHSAGHSA 10.0minimos, gobuild de las 07:11 UTC
CVE-2026-104252
crítica		Vitess vttablet /twopcz reflected XSSvitess.io/vitessGHSAGHSA 9.8gobuild de las 07:11 UTC
CVE-2026-88092
crítica		dotnet: ASP.NET Core Tampering Vulnerabilitydotnet-host, dotnet-sdk-8.0, dotnet-sdk-9.0 y 93 másGHSA, Red Hat, AlmaLinux, Amazon, Bitnami, Oracle, Rocky LinuxGHSA 9.4alma, rocky, rapidfort alma, Oracle Linux, amazon linux +9build de las 07:11 UTC
CVE-2026-70188
crítica		dotnet: ASP.NET Core Security Feature Bypass Vulnerabilitydotnet-host, dotnet-sdk-8.0, dotnet-sdk-9.0 y 92 másGHSA, Red Hat, AlmaLinux, Amazon, Oracle, Rocky LinuxGHSA 9.1alma, rocky, rapidfort alma, Oracle Linux, amazon linux +8build de las 07:11 UTC
CVE-2026-105016
crítica		Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerabilitydotnet8-runtime, dotnet9-runtime, dotnet10-runtime y 20 másGHSAGHSA 9.8rapidfort fedora, alpine, nugetbuild de las 07:11 UTC
CVE-2026-92892
crítica		github.com/jfrog/jfrog-cli: Potential command execution on the host running JFrog CLI.Red HatRed Hat 9.0build de las 07:11 UTC
CVE-2026-102989
crítica		TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses@tanstack/react-start, @tanstack/solid-start, @tanstack/start-server-core y 1 másGHSAGHSA 9.3npmbuild de las 07:11 UTC
CVE-2026-97229
crítica		ruby: integer overflow issue in CI/CD regular expression compilerruby, ruby-devel, ruby-libs y 46 másRed Hat, BitnamiBitnami 10.0rapidfort alma, rapidfort Oracle Linux, rapidfort Red Hat, rapidfort rocky, minimos +9build de las 07:11 UTC
CVE-2026-57118
crítica		PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointspraisonaiagentsGHSAGHSA 9.8pipbuild de las 07:11 UTC
CVE-2026-77366
crítica		obsidian-tc tokens can access arbitrary configured vaultsobsidian-tcGHSAGHSA 10.0npmbuild de las 07:11 UTC
CVE-2026-77363
crítica		obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackobsidian-tcGHSAGHSA 9.7npmbuild de las 07:11 UTC
CVE-2026-108261
crítica		TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment@tinacms/app, tinacmsGHSAGHSA 9.3npmbuild de las 07:11 UTC
CVE-2026-107845
crítica		Contao: Cross-site scripting in the comments bundlecontao/comments-bundleGHSAGHSA 9.3composerbuild de las 07:11 UTC
CVE-2026-107722
crítica		fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusionfast-jwtGHSAGHSA 9.8npmbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.