Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-100799
moyenne
firefox: Uninitialized memory in the Graphics: WebGPU componentbuild de 07:11 UTC
CVE-2026-100798
moyenne
firefox: Cryptography misuse in Storage: Quota Manager componentbuild de 07:11 UTC
CVE-2026-100797
moyenne
firefox: Privilege escalation due to use-after-free in the Graphics: WebRender componentbuild de 07:11 UTC
CVE-2026-100796
moyenne
Use-after-free in the JavaScript: WebAssembly component. This vul ...build de 07:11 UTC
CVE-2026-100795
moyenne
firefox: Denial-of-service in the Networking componentbuild de 07:11 UTC
CVE-2026-100794
moyenne
firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Internationalization componentbuild de 07:11 UTC
CVE-2026-100765
moyenne
Use-after-free in the JavaScript: WebAssembly component. This vulnerab ...build de 07:11 UTC
CVE-2026-100764
moyenne
Privilege escalation due to incorrect boundary conditions in the ...build de 07:11 UTC
CVE-2026-96422
moyenne
wireshark: Reachable Assertion in Wiresharkbuild de 07:11 UTC
CVE-2026-96421
moyenne
wireshark: Wireshark: Denial of Service via USB HID dissector infinite loopbuild de 07:11 UTC
CVE-2026-96420
moyenne
wireshark: Buffer Over-read in Wiresharkbuild de 07:11 UTC
CVE-2026-96418
moyenne
wireshark: Wireshark: Denial of Service via infinite loop in TIFF protocol dissectorbuild de 07:11 UTC
CVE-2026-96417
moyenne
wireshark: wireshark: Denial of Service via malformed RF4CE packetbuild de 07:11 UTC
CVE-2026-96416
moyenne
wireshark: Wireshark: Denial of Service via malformed IEEE 802.11 packet processingbuild de 07:11 UTC
CVE-2026-96415
moyenne
wireshark: Stack-based Buffer Overflow in Wiresharkbuild de 07:11 UTC
CVE-2026-95395
moyenne
wireshark: wireshark: Denial of Service via memory leak in IEEE C37.118 Synchrophasor dissectorbuild de 07:11 UTC
CVE-2026-95393
moyenne
wireshark: Heap-based Buffer Overflow in Wiresharkbuild de 07:11 UTC
CVE-2026-95392
moyenne
wireshark: Buffer Over-read in Wiresharkbuild de 07:11 UTC
CVE-2026-95391
moyenne
wireshark: Use After Free in Wiresharkbuild de 07:11 UTC
CVE-2026-95390
moyenne
wireshark: Wireshark: Denial of Service via crafted PEAK CAN TRC filebuild de 07:11 UTC
CVE-2026-95388
moyenne
wireshark: wireshark: Denial of Service via heap-based buffer overflow in sharkdbuild de 07:11 UTC
CVE-2026-95386
moyenne
wireshark: wireshark: Denial of Service via infinite loop in TTL file parserbuild de 07:11 UTC
CVE-2026-8937
moyenne
Missing Authorization in GitLabbuild de 07:11 UTC
CVE-2026-15390
moyenne
Das U-Bootwith CONFIG_IP_DEFRAG=y parameter fails to clear IP reassemb ...build de 07:11 UTC
CVE-2026-10518
moyenne
Incorrect Authorization in GitLabbuild de 07:11 UTC
CVE-2026-102474
moyenne
dash: dash: Heap out-of-bounds write in conv_escape via undersized Unicode escape reservationbuild de 07:11 UTC
CVE-2026-102473
moyenne
dash: dash: Super-polynomial backtracking in pmatch when libc fnmatch is disabledbuild de 07:11 UTC
CVE-2026-97029
moyenne
flatpak: flatpak: Sandboxed app can signal unsandboxed processes in the same process groupbuild de 07:11 UTC
CVE-2026-102414
moyenne
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's bloc ...build de 07:11 UTC
GHSA-6vj9-mwq6-2f5v
moyenne
Nodemailer: Process-global DNS cache reuses TLS `servername` across transports, enabling cross-tenant SMTP credential disclosurebuild de 07:11 UTC
CVE-2026-102277
moyenne
brace-expansion: brace-expansion: Denial of Service via crafted brace patternsbuild de 07:11 UTC
CVE-2026-102270
moyenne
pyjwt: pyjwt: Denial of Service via regular expression backtracking in is_pem_formatbuild de 07:11 UTC
CVE-2026-102269
moyenne
pyjwt: PyJWT: Token revocation bypass via non-canonical signature decodingbuild de 07:11 UTC
CVE-2026-102265
moyenne
pyjwt: pyjwt: Denial of Service via deeply nested token headersbuild de 07:11 UTC
CVE-2026-101914
moyenne
@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matchesbuild de 07:11 UTC
CVE-2026-102010
moyenne
gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: Denial of Service via use-after-free in binary heap erase_ifbuild de 07:11 UTC
CVE-2026-55156
moyenne
Token Optimizer MCP: Unauthenticated Path Traversal in Dashboard Session Log API Endpointsbuild de 07:11 UTC
CVE-2026-101913
moyenne
ip-address: ip-address: Security bypass via incomplete IPv6 link-local address validationbuild de 07:11 UTC
CVE-2026-101912
moyenne
ip-address: ip-address: Access control bypass via cross-family subnet comparisonbuild de 07:11 UTC
CVE-2026-101911
moyenne
ip-address: ip-address: Denial of Service via unbounded IPv6 address parsingbuild de 07:11 UTC
CVE-2026-101910
moyenne
ip-address: ip-address: Security boundary bypass via unclassified NAT64 local-use address rangebuild de 07:11 UTC
CVE-2026-101908
moyenne
axios: Axios: Outbound HTTP request manipulation via fetch adapter prototype pollutionbuild de 07:11 UTC
CVE-2026-101907
moyenne
axios: Axios: Server-Side Request Forgery via bypassed redirect restrictions in fetch adapterbuild de 07:11 UTC
CVE-2026-101904
moyenne
axios: Axios: HTTP header injection via inherited prototype propertiesbuild de 07:11 UTC
CVE-2026-101902
moyenne
axios: axios: Unintended HTTP method override via prototype pollution gadgetbuild de 07:11 UTC
CVE-2026-101900
moyenne
axios: Axios: Outbound HTTP header injection via prototype pollution in fetch adapterbuild de 07:11 UTC
CVE-2026-101898
moyenne
axios: axios: Security control bypass via unapplied HTTP/2 proxy and DNS settingsbuild de 07:11 UTC
CVE-2026-101101
moyenne
ag-ui: ag-ui: Denial of Service via uncaught JSON parsing exceptionbuild de 07:11 UTC
CVE-2026-101100
moyenne
@ag-ui/client: ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanupbuild de 07:11 UTC
CVE-2026-88816
moyenne
perl-DBI: perl-DBI: Denial of Service via numeric FetchHashKeyName attributebuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.