Attestkeep
Idioma: Español
Registrarse
Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

Última actualización de la database28 oct 2026, 01:21 UTC
27crítica, últimos 7 días324alta, últimos 7 días661media, últimos 7 días104baja, últimos 7 días
IDVulnerabilidadCalificada desdePublicada
CVE-2026-116172
media		vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interfacebuild de las 07:15 UTC
CVE-2026-116155
media		ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leakbuild de las 07:15 UTC
CVE-2026-116154
media		ImageMagick: ImageMagick: Denial of Service via XML parsing memory leakbuild de las 07:15 UTC
CVE-2026-116141
media		ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoderbuild de las 07:15 UTC
CVE-2026-80905
media		kernel: net: tap: fix wrong transport_header when sending VLAN-tagged framebuild de las 07:15 UTC
CVE-2026-80887
media		kernel: drm/vmwgfx: use check_add_overflow for shader size+offset boundbuild de las 07:15 UTC
CVE-2026-80883
media		kernel: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registeredbuild de las 07:15 UTC
CVE-2026-72262
media		kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/getbuild de las 07:15 UTC
CVE-2026-93453
media		SOGo before 5.12.11 constructs password-reset links using the client-s ...build de las 19:10 UTC
CVE-2024-56830
media		The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builti ...build de las 19:10 UTC
CVE-2024-31837
media		DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string ...build de las 19:10 UTC
CVE-2026-96405
media		NLnet Labs Unbound up to and including version 1.26.1 limits compressi ...build de las 07:10 UTC
CVE-2026-50106
media		When NLnet Labs Unbound up to and including version 1.26.1 is configur ...build de las 07:10 UTC
CVE-2026-35501
media		When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is co ...build de las 07:10 UTC
CVE-2026-109125
media		In NLnet Labs Unbound up to and including version 1.26.1, an observabl ...build de las 07:10 UTC
CVE-2026-101283
media		iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflo ...build de las 07:10 UTC
CVE-2026-63318
media		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)build de las 07:10 UTC
CVE-2026-65928
media		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)build de las 07:10 UTC
CVE-2026-98867
media		kernel: dm-pcache: bound the logical key offset from persistent memorybuild de las 19:09 UTC
CVE-2026-98865
media		kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock heldbuild de las 19:09 UTC
CVE-2026-89810
media		kernel: drm/amdkfd: Fix error path at svm_migrate_copy_to_rambuild de las 19:09 UTC
CVE-2026-80891
media		kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pagesbuild de las 19:09 UTC
openSUSE-SU-2026:12231-1
media		bind-9.20.30-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12232-1
media		brotli-1.2.1-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12234-1
media		chromedriver-156.0.8078.47-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12236-1
media		docker-compose-5.6.1-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12237-1
media		git-lfs-3.8.1-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12243-1
media		libsndfile-devel-1.2.2-7.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12244-1
media		libtirpc-devel-1.3.8-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12245-1
media		libmariadbd-devel-12.3.2-3.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12246-1
media		mihomo-1.19.33-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12247-1
media		nano-9.3-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12248-1
media		corepack24-24.22.1-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12249-1
media		libopenscap33-1.4.6-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12250-1
media		perl-Mozilla-CA-20261020.0.0-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12251-1
media		python313-Pillow-13.0.0-2.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12252-1
media		libruby4_0-4_0-4.0.9-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12254-1
media		tomcat-9.0.123-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12257-1
media		libunbound8-1.26.2-1.1 on GA mediabuild de las 19:09 UTC
CVE-2026-76654
media		kubelet: kubelet: Subpath symlinking on Windows nodes permits NTLM coercionbuild de las 07:11 UTC
CVE-2026-2270
media		kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creationbuild de las 07:11 UTC
CVE-2026-115897
media		serialize-javascript: serialize-javascript: Cross-Site Scripting via improper function escapingbuild de las 07:11 UTC
CVE-2026-115892
media		wasmtime: Wasmtime: Denial of Service via missing payload type validation in guest returnsbuild de las 07:11 UTC
CVE-2026-115886
media		mlflow: mlflow: Server-Side Request Forgery via insecure scorer deserializationbuild de las 07:11 UTC
CVE-2026-115883
media		LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesbuild de las 07:11 UTC
GHSA-8c8m-p3m8-cjg8
media		Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipientbuild de las 07:11 UTC
GHSA-m943-m63m-w62w
media		Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipientbuild de las 07:11 UTC
GHSA-85x2-q946-cp5h
media		Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not namebuild de las 07:11 UTC
GHSA-7xgj-8392-5q4r
media		FastMCP: Post-transform component authorization is skipped on direct callsbuild de las 07:11 UTC
GHSA-vqqp-x5qm-5qp4
media		FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization serverbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.