Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-101333
moyenne
keycloak-services: keycloak-services: Unbounded metric series creation via idp tag on broker login endpointbuild de 07:11 UTC
CVE-2026-19444
moyenne
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on Windowsbuild de 07:11 UTC
CVE-2026-94287
moyenne
libXpm: libXpm: Denial of Service via unsigned integer underflowbuild de 07:11 UTC
CVE-2026-94285
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in byte-oriented codeset parserbuild de 07:11 UTC
CVE-2026-94284
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in XIM trigger-key registration parserbuild de 07:11 UTC
CVE-2026-94283
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parserbuild de 07:11 UTC
CVE-2026-94282
moyenne
libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processingbuild de 07:11 UTC
CVE-2026-101017
moyenne
opendmarc: OpenDMARC: Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.cbuild de 07:11 UTC
CVE-2026-101016
moyenne
opendmarc: OpenDMARC: Improper policy enforcement via malformed DMARC record tagsbuild de 07:11 UTC
CVE-2026-101003
moyenne
mongoose: mongoose: Denial of Service via stack-based buffer overflow in MQTT brokerbuild de 07:11 UTC
CVE-2026-96281
moyenne
flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimesbuild de 07:11 UTC
CVE-2026-96280
moyenne
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systemsbuild de 07:11 UTC
CVE-2026-96279
moyenne
flatpak: flatpak: Path traversal issue in OCI archive extraction via hardlinksbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.