Vulnerabilidades

Vulnerabilidades críticas que el gate ya conoce.

Cada seis horas Attestkeep descarga la Trivy vulnerability database, la misma que el scanner lee dentro de su cluster. Estas son las entradas que la database calificó como críticas esta semana, y cuándo. No cuándo salió la noticia: cuándo lo supo el gate.

IDVulnerabilidadCalificada desdePublicada
CVE-2026-98980
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC
CVE-2026-98968
alta
In the Linux kernel, the following vulnerability has been resolved: a ...build de las 19:10 UTC
CVE-2026-98964
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC
CVE-2026-98952
alta
In the Linux kernel, the following vulnerability has been resolved: p ...build de las 19:10 UTC
CVE-2026-98945
alta
In the Linux kernel, the following vulnerability has been resolved: H ...build de las 19:10 UTC
CVE-2026-98944
alta
In the Linux kernel, the following vulnerability has been resolved: H ...build de las 19:10 UTC
CVE-2026-98927
alta
In the Linux kernel, the following vulnerability has been resolved: K ...build de las 19:10 UTC
CVE-2026-98899
alta
In the Linux kernel, the following vulnerability has been resolved: n ...build de las 19:10 UTC
CVE-2026-101025
alta
Description NGINX JavaScript (njs) has a vulnerability where the bui ...build de las 07:10 UTC
CVE-2026-101019
alta
Description NGINX JavaScript (njs) has a vulnerability where the njs X ...build de las 07:10 UTC
CVE-2026-95394
alta
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...build de las 07:10 UTC
CVE-2026-15957
alta
Smithy-RS is a Rust code generation and runtime framework that ge ...build de las 07:10 UTC
CVE-2026-104269
alta
[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]build de las 07:10 UTC
CVE-2026-16271
alta
[hw/display/qxl: validate primary surface stride against width]build de las 07:10 UTC
CVE-2026-17588
alta
[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]build de las 07:10 UTC
CVE-2026-63321
alta
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de las 07:10 UTC
CVE-2026-66899
alta
[virtio-balloon: fix free-page BH teardown on unrealize]build de las 07:10 UTC
CVE-2026-66900
alta
[hw/net/virtio-net: strip trailing padding when caching RSC segment]build de las 07:10 UTC
CVE-2026-77913
alta
[hw/display/vga: fix text-mode OOB write after a graphics surface switch]build de las 07:10 UTC
CVE-2026-84788
alta
[io/channel-socket: do not treat a zero length write as an error]build de las 07:10 UTC
SUSE-SU-2026:4890-1
alta
Security update for cpupowerbuild de las 19:09 UTC
SUSE-SU-2026:4891-1
alta
Security update for aws-iam-authenticatorbuild de las 19:09 UTC
SUSE-SU-2026:4892-1
alta
Security update for the Linux Kernelbuild de las 19:09 UTC
SUSE-SU-2026:4893-1
alta
Security update for emacsbuild de las 19:09 UTC
SUSE-SU-2026:4895-1
alta
Security update for gimpbuild de las 19:09 UTC
SUSE-SU-2026:4897-1
alta
Security update for cifs-utilsbuild de las 19:09 UTC
openSUSE-SU-2026:12233-1
alta
ca-certificates-mozilla-2.92-2.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12235-1
alta
containerized-data-importer1.65-api-1.65.0-4.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12238-1
alta
gitoxide-0.61.0-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12239-1
alta
go1.27-1.27.3-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12240-1
alta
google-guest-agent-20261015.00-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12241-1
alta
kubevirt1.8-container-disk-1.8.4-7.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12242-1
alta
kubevirt1.9-container-disk-1.9.1-2.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12253-1
alta
tekton-cli-0.46.2-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12255-1
alta
tomcat10-10.1.61-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12256-1
alta
tomcat11-11.0.27-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:12258-1
alta
zk-0.15.7-1.1 on GA mediabuild de las 19:09 UTC
openSUSE-SU-2026:22151-1
alta
Security update for php8build de las 19:09 UTC
openSUSE-SU-2026:22152-1
alta
Security update for go1.26build de las 19:09 UTC
openSUSE-SU-2026:22153-1
alta
Security update for go1.27build de las 19:09 UTC
openSUSE-SU-2026:22155-1
alta
Security update for cpupowerbuild de las 19:09 UTC
CVE-2026-115895
alta
happy-dom: happy-dom: Arbitrary code execution via unvalidated ECMAScript Module import aliasbuild de las 07:11 UTC
GHSA-f2hq-32vh-53cc
alta
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded wordsbuild de las 07:11 UTC
CVE-2026-115778
alta
twisted: twisted: Denial of Service via memory exhaustion during Telnet negotiationbuild de las 07:11 UTC
CVE-2026-115776
alta
twisted: Twisted: Denial of Service via unbounded IRC bufferbuild de las 07:11 UTC
CVE-2026-115775
alta
twisted: twisted: Denial of Service via memory exhaustion in XML stream parserbuild de las 07:11 UTC
GHSA-q54r-jf2p-rfr2
alta
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()build de las 07:11 UTC
GHSA-9969-6676-49h5
alta
Echo: WebSocket proxy can retain connections and handlers after client disconnectbuild de las 07:11 UTC
GHSA-h7wr-284f-5qvc
alta
Echo: Decompress permits unbounded gzip expansion in v4build de las 07:11 UTC
GHSA-f48p-c9v4-h7xv
alta
Echo: BodyDump captures request and response bodies without size limits in v4build de las 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.