Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-19444
moyenne
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on Windowsbuild de 07:11 UTC
CVE-2026-94287
moyenne
libXpm: libXpm: Denial of Service via unsigned integer underflowbuild de 07:11 UTC
CVE-2026-94285
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in byte-oriented codeset parserbuild de 07:11 UTC
CVE-2026-94284
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in XIM trigger-key registration parserbuild de 07:11 UTC
CVE-2026-94283
moyenne
libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parserbuild de 07:11 UTC
CVE-2026-94282
moyenne
libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processingbuild de 07:11 UTC
CVE-2026-101017
moyenne
opendmarc: OpenDMARC: Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.cbuild de 07:11 UTC
CVE-2026-101016
moyenne
opendmarc: OpenDMARC: Improper policy enforcement via malformed DMARC record tagsbuild de 07:11 UTC
CVE-2026-101003
moyenne
mongoose: mongoose: Denial of Service via stack-based buffer overflow in MQTT brokerbuild de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.