Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-91411
media
openjdk: Enhance JGSS (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91410
media
openjdk: Enhance zipfs (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91398
media
openjdk: Enhance SOCKS5 support (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91396
media
openjdk: Improve Pack200 handling (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91395
media
openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91394
media
openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91382
media
openjdk: Enhance Image Processing (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91380
media
openjdk: Enhance Preferences (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91379
media
openjdk: Enhance JShell (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91375
media
openjdk: Enhance jmod handling (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91374
media
openjdk: Enhance jstatd (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91373
media
openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-91332
media
openjdk: Enhance HTTP Client (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-87294
media
openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-87293
media
openjdk: Enhance RMI connections (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-87291
media
openjdk: Enhance HTTP Server (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-87290
media
openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83400
media
openjdk: Enhance XML Processing (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83395
media
openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83387
media
openjdk: Enhance WebRowSets (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83381
media
openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83380
media
openjdk: Enhance LDAP logins (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83378
media
openjdk: Improve C2 loop transformations (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-83374
media
openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)build de las 07:11 UTC
CVE-2026-113730
media
OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, ...build de las 07:11 UTC
CVE-2026-113340
media
chromium-browser: angle: Memory corruption in ANGLEbuild de las 07:11 UTC
CVE-2026-113277
media
chromium-browser: chromium-browser: Out of bounds read in CustomTabsbuild de las 07:11 UTC
CVE-2026-113250
media
chromium-browser: angle: Use after free in ANGLEbuild de las 07:11 UTC
CVE-2026-113200
media
chromium-browser: angle: Use after free in ANGLEbuild de las 07:11 UTC
CVE-2026-113157
media
chromium-browser: angle: Information leak in ANGLEbuild de las 07:11 UTC
CVE-2026-113151
media
chromium-browser: chromium-browser: Out of bounds read in Actorbuild de las 07:11 UTC
CVE-2026-113106
media
chromium-browser: skia: Memory corruption in Skiabuild de las 07:11 UTC
CVE-2026-113054
media
chromium-browser: chromium-browser: Out of bounds read in SiteIsolationbuild de las 07:11 UTC
CVE-2026-113050
media
chromium-browser: chromium-browser: Out of bounds read in HIDbuild de las 07:11 UTC
CVE-2026-113035
media
chromium-browser: chromium-browser: Out of bounds read in APIbuild de las 07:11 UTC
CVE-2026-113010
media
chromium-browser: chromium-browser: Out of bounds read in Extensionsbuild de las 07:11 UTC
CVE-2026-111879
media
perl-DBI: perl-DBI: Denial of Service via unreleased table lock on errorbuild de las 07:11 UTC
CVE-2026-101803
media
mysql: mysql: unauthorized data modification via XML componentbuild de las 07:11 UTC
CVE-2026-101802
media
mysql: mysql: Denial of Service via the Server Parserbuild de las 07:11 UTC
CVE-2026-101801
media
mysql: mysql: Denial of Service in Server Optimizerbuild de las 07:11 UTC
CVE-2026-101800
media
mysql: mysql: unauthorized data access via improper privilege controlsbuild de las 07:11 UTC
CVE-2026-101799
media
mysql: mysql: Denial of Service via Group Replication GCSbuild de las 07:11 UTC
CVE-2026-101798
media
mysql: mysql: Denial of Service in the server optimizerbuild de las 07:11 UTC
CVE-2026-101795
media
mysql: mysql: Complete service compromise by a local privileged attackerbuild de las 07:11 UTC
CVE-2026-101794
media
mysql: mysql: Denial of Service via XML component flawbuild de las 07:11 UTC
CVE-2026-101789
media
mysql: mysql: Denial of Service via the Optimizer componentbuild de las 07:11 UTC
CVE-2026-101788
media
mysql: mysql: Denial of Service via Server Components Servicesbuild de las 07:11 UTC
CVE-2026-101787
media
mysql: mysql: Denial of Service via Server Optimizer flawbuild de las 07:11 UTC
CVE-2026-101784
media
mysql: mysql: Denial of service in query optimizerbuild de las 07:11 UTC
CVE-2026-101780
media
mysql: mysql: Denial of Service via X Pluginbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.