Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-103267
media
Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invitebuild de las 07:11 UTC
CVE-2026-103263
media
tornado: Tornado: Information disclosure via symlink path traversal in StaticFileHandlerbuild de las 07:11 UTC
CVE-2026-103261
media
tornado: tornado: Denial of Service (DoS) via unbounded query string parsingbuild de las 07:11 UTC
CVE-2026-103641
media
gegl: gegl04: gegl: out-of-bounds read in the Radiance HDR uncompressed scanline decoderbuild de las 07:11 UTC
GHSA-3hv7-mjh2-fv65
media
Tornado: Unbounded query-string argument count allows event-loop-stalling DoSbuild de las 07:11 UTC
GHSA-59cr-6r3x-644w
media
GitPython submodule update path traversal can write outside the repositorybuild de las 07:11 UTC
GHSA-whh4-5q6c-9v3x
media
GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oraclebuild de las 07:11 UTC
CVE-2026-103001
media
pyjwt: pyjwt: Token validation bypass via options dictionary mutationbuild de las 07:11 UTC
CVE-2026-103387
media
uri-js: uri-js: Denial of Service via crafted mailto URIbuild de las 07:11 UTC
CVE-2026-102991
media
Mako: Path traversal via drive-letter URI on Windows in TemplateLookupbuild de las 07:11 UTC
CVE-2026-103500
media
thunderbird: thunderbird: Heap buffer overflow via opening large emailsbuild de las 07:11 UTC
CVE-2026-103399
media
libsoup: SoupServer: HTTP/1 request smuggling via undrained Expect: 100-continue bodybuild de las 07:11 UTC
CVE-2026-47604
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Information disclosure via missing authorization checksbuild de las 07:11 UTC
CVE-2026-47603
media
nvidia-driver: nvidia-driver: Information disclosure via missing authorization in kernel mode driverbuild de las 07:11 UTC
CVE-2026-47598
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery pathbuild de las 07:11 UTC
CVE-2026-47586
media
nvidia-driver: nvidia-driver: arbitrary code execution via kernel module use-after-freebuild de las 07:11 UTC
CVE-2026-47584
media
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel modulebuild de las 07:11 UTC
CVE-2026-47582
media
nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel modulebuild de las 07:11 UTC
CVE-2026-47579
media
nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode driverbuild de las 07:11 UTC
CVE-2026-47568
media
nvidia-driver: nvidia-driver: Denial of Service via uncontrolled kernel loggingbuild de las 07:11 UTC
CVE-2026-47567
media
nvidia-driver: nvidia-driver: Denial of Service via DRM VMA address space exhaustionbuild de las 07:11 UTC
CVE-2026-47566
media
nvidia-driver: nvidia-driver: Denial of Service via kernel memory leakbuild de las 07:11 UTC
CVE-2026-47565
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel mode race conditionbuild de las 07:11 UTC
CVE-2026-47562
media
nvidia-driver: nvidia-driver: Denial of Service via kernel log injectionbuild de las 07:11 UTC
CVE-2026-47557
media
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47555
media
nvidia-driver: nvidia-driver: Information disclosure via uninitialized kernel memory copybuild de las 07:11 UTC
CVE-2026-47549
media
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel modulebuild de las 07:11 UTC
CVE-2026-47547
media
nvidia-driver: nvidia-driver: Arbitrary code execution via improper input validation in firmwarebuild de las 07:11 UTC
CVE-2026-47546
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via improper input validation in firmwarebuild de las 07:11 UTC
CVE-2026-47543
media
nvidia-driver: nvidia-driver: arbitrary code execution via improper input validation in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47542
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via improper input validation in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47538
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via firmware out-of-bounds writebuild de las 07:11 UTC
CVE-2026-47537
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47534
media
nvidia-driver: nvidia-driver: Denial of Service via divide-by-zero in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47533
media
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode array indexing flawbuild de las 07:11 UTC
CVE-2026-47532
media
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel mode out-of-bounds writebuild de las 07:11 UTC
CVE-2026-47531
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via null pointer dereference in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47529
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47527
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via firmware out-of-bounds readbuild de las 07:11 UTC
CVE-2026-47526
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via null pointer dereference in firmwarebuild de las 07:11 UTC
CVE-2026-47525
media
nvidia-driver: nvidia-driver: Arbitrary code execution via improper array index validationbuild de las 07:11 UTC
CVE-2026-47524
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via out-of-bounds readbuild de las 07:11 UTC
CVE-2026-47522
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via improper input validation in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47518
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via improper permission assignment in secure microcontrollerbuild de las 07:11 UTC
CVE-2026-47517
media
nvidia-driver: nvidia-driver: Denial of Service via crafted ioctl requestbuild de las 07:11 UTC
CVE-2026-47515
media
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode unbounded string operationbuild de las 07:11 UTC
CVE-2026-47509
media
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layerbuild de las 07:11 UTC
CVE-2026-47492
media
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via improper access control in the kernel mode layerbuild de las 07:11 UTC
GHSA-97jj-33gv-5xf9
media
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literalbuild de las 07:11 UTC
CVE-2026-102983
media
Astro: Netlify Image CDN allowlist bypass enables SSRFbuild de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.