Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-98980
élevée
In the Linux kernel, the following vulnerability has been resolved: n ...build de 19:10 UTC
CVE-2026-98968
élevée
In the Linux kernel, the following vulnerability has been resolved: a ...build de 19:10 UTC
CVE-2026-98964
élevée
In the Linux kernel, the following vulnerability has been resolved: n ...build de 19:10 UTC
CVE-2026-98952
élevée
In the Linux kernel, the following vulnerability has been resolved: p ...build de 19:10 UTC
CVE-2026-98945
élevée
In the Linux kernel, the following vulnerability has been resolved: H ...build de 19:10 UTC
CVE-2026-98944
élevée
In the Linux kernel, the following vulnerability has been resolved: H ...build de 19:10 UTC
CVE-2026-98927
élevée
In the Linux kernel, the following vulnerability has been resolved: K ...build de 19:10 UTC
CVE-2026-98899
élevée
In the Linux kernel, the following vulnerability has been resolved: n ...build de 19:10 UTC
CVE-2026-101025
élevée
Description NGINX JavaScript (njs) has a vulnerability where the bui ...build de 07:10 UTC
CVE-2026-101019
élevée
Description NGINX JavaScript (njs) has a vulnerability where the njs X ...build de 07:10 UTC
CVE-2026-95394
élevée
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...build de 07:10 UTC
CVE-2026-15957
élevée
Smithy-RS is a Rust code generation and runtime framework that ge ...build de 07:10 UTC
CVE-2026-104269
élevée
[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]build de 07:10 UTC
CVE-2026-16271
élevée
[hw/display/qxl: validate primary surface stride against width]build de 07:10 UTC
CVE-2026-17588
élevée
[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]build de 07:10 UTC
CVE-2026-63321
élevée
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemubuild de 07:10 UTC
CVE-2026-66899
élevée
[virtio-balloon: fix free-page BH teardown on unrealize]build de 07:10 UTC
CVE-2026-66900
élevée
[hw/net/virtio-net: strip trailing padding when caching RSC segment]build de 07:10 UTC
CVE-2026-77913
élevée
[hw/display/vga: fix text-mode OOB write after a graphics surface switch]build de 07:10 UTC
CVE-2026-84788
élevée
[io/channel-socket: do not treat a zero length write as an error]build de 07:10 UTC
SUSE-SU-2026:4890-1
élevée
Security update for cpupowerbuild de 19:09 UTC
SUSE-SU-2026:4891-1
élevée
Security update for aws-iam-authenticatorbuild de 19:09 UTC
SUSE-SU-2026:4892-1
élevée
Security update for the Linux Kernelbuild de 19:09 UTC
SUSE-SU-2026:4893-1
élevée
Security update for emacsbuild de 19:09 UTC
SUSE-SU-2026:4895-1
élevée
Security update for gimpbuild de 19:09 UTC
SUSE-SU-2026:4897-1
élevée
Security update for cifs-utilsbuild de 19:09 UTC
openSUSE-SU-2026:12233-1
élevée
ca-certificates-mozilla-2.92-2.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12235-1
élevée
containerized-data-importer1.65-api-1.65.0-4.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12238-1
élevée
gitoxide-0.61.0-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12239-1
élevée
go1.27-1.27.3-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12240-1
élevée
google-guest-agent-20261015.00-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12241-1
élevée
kubevirt1.8-container-disk-1.8.4-7.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12242-1
élevée
kubevirt1.9-container-disk-1.9.1-2.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12253-1
élevée
tekton-cli-0.46.2-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12255-1
élevée
tomcat10-10.1.61-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12256-1
élevée
tomcat11-11.0.27-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:12258-1
élevée
zk-0.15.7-1.1 on GA mediabuild de 19:09 UTC
openSUSE-SU-2026:22151-1
élevée
Security update for php8build de 19:09 UTC
openSUSE-SU-2026:22152-1
élevée
Security update for go1.26build de 19:09 UTC
openSUSE-SU-2026:22153-1
élevée
Security update for go1.27build de 19:09 UTC
openSUSE-SU-2026:22155-1
élevée
Security update for cpupowerbuild de 19:09 UTC
CVE-2026-115895
élevée
happy-dom: happy-dom: Arbitrary code execution via unvalidated ECMAScript Module import aliasbuild de 07:11 UTC
GHSA-f2hq-32vh-53cc
élevée
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded wordsbuild de 07:11 UTC
CVE-2026-115778
élevée
twisted: twisted: Denial of Service via memory exhaustion during Telnet negotiationbuild de 07:11 UTC
CVE-2026-115776
élevée
twisted: Twisted: Denial of Service via unbounded IRC bufferbuild de 07:11 UTC
CVE-2026-115775
élevée
twisted: twisted: Denial of Service via memory exhaustion in XML stream parserbuild de 07:11 UTC
GHSA-q54r-jf2p-rfr2
élevée
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()build de 07:11 UTC
GHSA-9969-6676-49h5
élevée
Echo: WebSocket proxy can retain connections and handlers after client disconnectbuild de 07:11 UTC
GHSA-h7wr-284f-5qvc
élevée
Echo: Decompress permits unbounded gzip expansion in v4build de 07:11 UTC
GHSA-f48p-c9v4-h7xv
élevée
Echo: BodyDump captures request and response bodies without size limits in v4build de 07:11 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.