Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98904
moyenne
kernel: mailbox: imx: Use devm_pm_runtime_enable()build de 19:17 UTC
CVE-2026-114610
moyenne
fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fp ...build de 19:17 UTC
CVE-2026-114609
moyenne
fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's sh ...build de 19:17 UTC
CVE-2026-108360
moyenne
PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loadingbuild de 19:17 UTC
CVE-2026-114501
moyenne
pillow: Pillow: Information disclosure via improper memory alignment during Arrow exportbuild de 19:17 UTC
CVE-2026-96643
moyenne
pillow: pillow: Denial of Service via repeated EXIF headersbuild de 19:17 UTC
CVE-2026-112897
moyenne
pillow: pillow: Information disclosure via uninitialized buffer in TIFF decodingbuild de 19:17 UTC
CVE-2026-106414
moyenne
chromium-browser: Improper input validation in Mobilebuild de 19:17 UTC
CVE-2026-103288
moyenne
Ghost: Authorization Bypass in Comment Like Featurebuild de 19:17 UTC
CVE-2026-94545
moyenne
Satori-generated SVG has improper escapingbuild de 19:17 UTC
CVE-2026-98148
moyenne
kernel: drm/gud: validate GUD_ROTATION_0 is present in supported rotationsbuild de 19:17 UTC
CVE-2026-98147
moyenne
kernel: printk: Don't WARN on kthread_run failurebuild de 19:17 UTC
CVE-2026-60083
moyenne
SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace filesbuild de 19:17 UTC
CVE-2026-72207
moyenne
kernel: ntfs: not change 0-byte $DATA attribute to non-residentbuild de 19:17 UTC
CVE-2026-64601
moyenne
kernel: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmissionbuild de 19:17 UTC
CVE-2026-64580
moyenne
kernel: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()build de 19:17 UTC
CVE-2024-8928
moyenne
Amazon Linux 2023 - ALAS2023-2025-845: Medium priority package update for php8.1build de 19:17 UTC
SUSE-SU-2026:4906-1
moyenne
Security update for krb5build de 19:17 UTC
openSUSE-SU-2026:12267-1
moyenne
amazon-cloudwatch-agent-1.300073.2-2.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12269-1
moyenne
dlib-devel-20.0.1-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12270-1
moyenne
flannel-0.28.10-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12272-1
moyenne
liblldpctl4-1.0.23-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12273-1
moyenne
benchdnn-3.14-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12274-1
moyenne
libonnxruntime1-1.31.0-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12275-1
moyenne
perl-Plack-1.0057-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12276-1
moyenne
perl-Starman-0.4019-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12277-1
moyenne
python313-djangorestframework-3.18.2-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12278-1
moyenne
python313-fpdf2-2.8.9-2.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12279-1
moyenne
python313-langgraph-sdk-0.4.9-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12280-1
moyenne
python313-nltk-3.10.4-1.1 on GA mediabuild de 19:17 UTC
openSUSE-SU-2026:12281-1
moyenne
traefik-3.7.16-1.1 on GA mediabuild de 19:17 UTC
CVE-2026-107080
moyenne
openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_vbuild de 07:13 UTC
CVE-2026-92171
moyenne
infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args storebuild de 07:13 UTC
CVE-2026-116497
moyenne
gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemonbuild de 07:13 UTC
CVE-2026-116262
moyenne
libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspectorbuild de 07:13 UTC
CVE-2026-115718
moyenne
builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_promptbuild de 07:13 UTC
CVE-2026-115717
moyenne
builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webpbuild de 07:13 UTC
CVE-2026-99082
moyenne
kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cachebuild de 07:13 UTC
CVE-2026-99081
moyenne
kernel: bnxt_en: fix DMA mapping length for padded small packetsbuild de 07:13 UTC
CVE-2026-99079
moyenne
kernel: net/mlx5e: Prevent stale XSK buffer release on refill retrybuild de 07:13 UTC
CVE-2026-99074
moyenne
kernel: ipv4: stop PMTU walk when nexthop group shrinksbuild de 07:13 UTC
CVE-2026-99073
moyenne
kernel: ipv4: stop exception dump when nexthop group shrinksbuild de 07:13 UTC
CVE-2026-98903
moyenne
kernel: mailbox: imx: Add a channel shutdown fieldbuild de 07:13 UTC
CVE-2026-98902
moyenne
kernel: md/raid5: let stripe batch bm_seq comparison wrap-safebuild de 07:13 UTC
CVE-2026-98900
moyenne
kernel: xen/gntalloc: validate grant count before allocationbuild de 07:13 UTC
CVE-2026-98898
moyenne
kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initializedbuild de 07:13 UTC
CVE-2026-98897
moyenne
kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ackbuild de 07:13 UTC
CVE-2026-98896
moyenne
kernel: thunderbolt: Keep the domain reference while processing hotplugbuild de 07:13 UTC
CVE-2026-98895
moyenne
kernel: net/mlx5: HWS, Handle destroying table that has a miss tablebuild de 07:13 UTC
CVE-2026-98894
moyenne
kernel: drm/amd/ras: reset CPER ring on corrupt entry sizebuild de 07:13 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.