Vulnérabilités

Les vulnérabilités critiques que le gate connaît déjà.

Toutes les six heures, Attestkeep récupère la Trivy vulnerability database, celle que le scanner lit dans votre cluster. Voici les entrées que la database a classées critiques cette semaine, et quand. Pas quand la nouvelle est tombée : quand le gate l'a su.

IDVulnérabilitéClassée depuisPubliée
CVE-2026-95502
moyenne
grafana: grafana: Denial of Service via oversized Git Sync responsesbuild de 01:25 UTC
CVE-2026-107819
moyenne
mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verificationbuild de 01:25 UTC
CVE-2026-107817
moyenne
mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json pluginbuild de 01:25 UTC
CVE-2026-106061
moyenne
gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted filebuild de 01:25 UTC
CVE-2026-80048
moyenne
sssd: sssd-kcm: Local Denial of Service via excessive memory preallocationbuild de 01:25 UTC
CVE-2026-104046
moyenne
sssd: sssd: Denial of Service via incomplete Identity Provider authentication requestsbuild de 01:25 UTC
CVE-2026-106063
moyenne
GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensionsbuild de 01:25 UTC
CVE-2026-104047
moyenne
sssd: sssd: Information disclosure via query injection in Entra ID lookupsbuild de 01:25 UTC
CVE-2026-98359
moyenne
kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speedbuild de 01:25 UTC
CVE-2026-98169
moyenne
kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()build de 01:25 UTC
CVE-2026-92821
moyenne
sssd: SSSD: Access control bypass via premature LDAP access rule evaluationbuild de 01:25 UTC
CVE-2026-104038
moyenne
sssd: sssd: Denial of Service via missing SID extension in certificate mappingbuild de 01:25 UTC
CVE-2026-104036
moyenne
sssd: sssd: Denial of service via out-of-bounds write in NFS idmap pluginbuild de 01:25 UTC
CVE-2026-104034
moyenne
sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewalbuild de 01:25 UTC
CVE-2026-104032
moyenne
sssd: sssd: Denial of Service via unprivileged autofs cache invalidationbuild de 01:25 UTC
CVE-2026-104031
moyenne
sssd: SSSD: Denial of Service via memory exhaustion in autofs responderbuild de 01:25 UTC
CVE-2026-104030
moyenne
sssd: sssd: Denial of Service via out-of-bounds read during passkey parsingbuild de 01:25 UTC
CVE-2026-103531
moyenne
opensc: opensc: Arbitrary code execution via stack-based buffer overflow in card-setcosbuild de 01:25 UTC
CVE-2026-103242
moyenne
rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tagbuild de 01:25 UTC
CVE-2026-95520
moyenne
rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packagesbuild de 01:25 UTC
CVE-2026-98120
moyenne
kernel: netfs: Fix subreq ref leakbuild de 01:25 UTC
CVE-2026-98119
moyenne
kernel: netfs: break unbuffered write when netfs_alloc_subrequest() failsbuild de 01:25 UTC
CVE-2026-88383
moyenne
libical: libical: Denial of Service via crafted iCalendar property parsingbuild de 01:25 UTC
CVE-2026-49919
moyenne
freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font renderingbuild de 01:25 UTC
CVE-2026-116196
moyenne
github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backendbuild de 19:14 UTC
CVE-2026-116195
moyenne
github.com/rclone/rclone: rclone: Path traversal via link suffix trimmingbuild de 19:14 UTC
CVE-2026-116194
moyenne
github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callbackbuild de 19:14 UTC
CVE-2026-116192
moyenne
github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-servebuild de 19:14 UTC
CVE-2026-116187
moyenne
github.com/rclone/rclone: rclone: Cross-tenant upload tampering via authorization bypass in S3 authentication proxybuild de 19:14 UTC
CVE-2026-80785
moyenne
kernel: fbdev: serialize mode sysfs access with lock_fb_info()build de 19:14 UTC
CVE-2026-74690
moyenne
kernel: s390/ism: Fix UAF of sba and ieq during ism_dev_exit()build de 19:14 UTC
CVE-2026-63862
moyenne
kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not foundbuild de 19:14 UTC
CVE-2026-116470
moyenne
keycloak-services: keycloak-services: SCIM user listing endpoint returns full PII without per-user VIEW authorization checkbuild de 19:14 UTC
GHSA-x65r-p6hf-94hv
moyenne
Missing authorization on Avo association show endpoint exposes related recordsbuild de 19:14 UTC
openSUSE-SU-2026:12259-1
moyenne
MozillaFirefox-158.0.1-1.1 on GA mediabuild de 19:14 UTC
openSUSE-SU-2026:12260-1
moyenne
buildpacks-cli-0.40.10-1.1 on GA mediabuild de 19:14 UTC
openSUSE-SU-2026:12263-1
moyenne
nvidia-open-driver-G06-signed-check-580.196.07-1.1 on GA mediabuild de 19:14 UTC
openSUSE-SU-2026:12265-1
moyenne
python313-wyoming-1.10.2-1.1 on GA mediabuild de 19:14 UTC
openSUSE-SU-2026:12266-1
moyenne
libvips-devel-8.18.7-1.1 on GA mediabuild de 19:14 UTC
openSUSE-SU-2026:22163-1
moyenne
Security update for rabbitmq-serverbuild de 19:14 UTC
openSUSE-SU-2026:22165-1
moyenne
Security update for libmodplugbuild de 19:14 UTC
CVE-2026-112768
moyenne
Parse Server before 8.6.99 and 9.x before 9.10.3 Information Disclosure via User Updatebuild de 14:38 UTC
CVE-2026-116181
moyenne
vllm: vllm: Denial of Service via unvalidated stop token identifiersbuild de 07:15 UTC
CVE-2026-116180
moyenne
vllm: vLLM: Denial of Service via uninitialized log probability tensorsbuild de 07:15 UTC
CVE-2026-116178
moyenne
vllm: vLLM: Denial of Service via inconsistent multimodal metadatabuild de 07:15 UTC
CVE-2026-116175
moyenne
vllm: vllm: Denial of Service via audio decompression bomb in chat completionsbuild de 07:15 UTC
CVE-2026-116174
moyenne
vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC servicebuild de 07:15 UTC
CVE-2026-116173
moyenne
vllm: vllm: Denial of Service via excessive candidate token IDs in gRPC interfacebuild de 07:15 UTC
CVE-2026-116172
moyenne
vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interfacebuild de 07:15 UTC
CVE-2026-116155
moyenne
ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leakbuild de 07:15 UTC

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.