Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-112390
yüksek		pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing07:11 UTC derlemesi
CVE-2026-112778
yüksek		Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespa ...07:11 UTC derlemesi
CVE-2026-112260
yüksek		gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing07:11 UTC derlemesi
CVE-2026-111759
yüksek		markdown-it: markdown-it: Denial of Service via mismatched quote parsing07:11 UTC derlemesi
CVE-2026-111066
yüksek		aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing07:11 UTC derlemesi
CVE-2026-111064
yüksek		aiohttp: aiohttp: Denial of Service via missing initial request timeout07:11 UTC derlemesi
GHSA-2g87-pp6c-29x5
yüksek		aiohttp: Multiple instances of excessive or unbounded memory/CPU use07:11 UTC derlemesi
CVE-2026-112366
yüksek		picomatch: picomatch: Denial of Service via single-branch repeated extglob patterns07:11 UTC derlemesi
CVE-2026-112307
yüksek		sqlparse: sqlparse: Arbitrary code execution via unescaped PHP output formatting07:11 UTC derlemesi
CVE-2026-103314
yüksek		stackrox: stackrox: SAML response replay allows multiple Central authentication tokens07:11 UTC derlemesi
CVE-2026-88900
yüksek		org.apache.camel/camel-jgroups: camel-jgroups: Arbitrary code execution via untrusted data deserialization07:11 UTC derlemesi
CVE-2026-88901
yüksek		org.apache.camel/camel-smooks: camel-smooks: Information disclosure via XML external entity injection07:11 UTC derlemesi
CVE-2026-85251
yüksek		org.apache.camel/camel-http: camel-http: Information disclosure via improper credential handling during HTTP redirects07:11 UTC derlemesi
CVE-2026-85250
yüksek		org.apache.camel/camel-xpath: camel-xpath: Information disclosure via XML external entity references07:11 UTC derlemesi
CVE-2026-80344
yüksek		org.apache.camel/camel-as2: Apache Camel AS2: Server-Side Request Forgery via unvalidated receipt destination07:11 UTC derlemesi
CVE-2026-80343
yüksek		org.apache.camel/camel-netty-http: Apache Camel Netty HTTP: Security constraint bypass via case sensitivity mismatch07:11 UTC derlemesi
CVE-2026-79985
yüksek		org.apache.camel/camel-smb: camel-smb: Unauthorized file access via path traversal07:11 UTC derlemesi
CVE-2026-79984
yüksek		org.apache.camel/camel-mina-sftp: Apache Camel Mina SFTP: Unauthorized file access via path traversal07:11 UTC derlemesi
CVE-2026-79983
yüksek		org.apache.camel/camel-ftp: camel-ftp: Unauthorized remote file access via path traversal07:11 UTC derlemesi
CVE-2026-78165
yüksek		org.apache.camel/camel-spring-redis: camel-spring-redis: Arbitrary code execution via untrusted Java deserialization07:11 UTC derlemesi
CVE-2026-78164
yüksek		org.apache.camel/camel-http-common: org.apache.camel/camel-http: org.apache.camel/camel-vertx-http: org.apache.camel/camel-undertow: org.apache.camel/camel-netty-http: Apache Camel: information disclosure via improper property placeholder evaluation in HTTP headers07:11 UTC derlemesi
CVE-2026-71253
yüksek		org.apache.johnzon/johnzon-mapper: Apache Johnzon: Arbitrary code execution via unsafe class loading07:11 UTC derlemesi
CVE-2026-16460
yüksek		bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization07:11 UTC derlemesi
CVE-2026-112075
yüksek		unsloth: unsloth: Arbitrary code execution via unsafe class selection07:11 UTC derlemesi
CVE-2026-98805
yüksek		kernel: tipc: prevent GCM nonce reuse on peer key changes07:11 UTC derlemesi
CVE-2026-98742
yüksek		kernel: kernel: Use-after-free via race condition in ALSA sequencer compatibility ioctls07:11 UTC derlemesi
CVE-2026-98741
yüksek		kernel: ALSA: ua101: reject mismatched capture/playback packet sizes07:11 UTC derlemesi
CVE-2026-98716
yüksek		kernel: KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted07:11 UTC derlemesi
CVE-2026-98573
yüksek		kernel: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()07:11 UTC derlemesi
CVE-2026-98550
yüksek		kernel: tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow07:11 UTC derlemesi
CVE-2026-98548
yüksek		kernel: sctp: discard the rest of the packet on a stale-cookie error07:11 UTC derlemesi
CVE-2026-98532
yüksek		kernel: ipv6: do not let ipv6_find_hdr() return an offset past the packet end07:11 UTC derlemesi
CVE-2026-98524
yüksek		kernel: rds: ib: Clear the sg list when mapping an MR fails07:11 UTC derlemesi
CVE-2026-98490
yüksek		kernel: net: openvswitch: conntrack: fix helper UAF due to extensions realloc07:11 UTC derlemesi
CVE-2026-98442
yüksek		kernel: net/sched: act_ct: fix helper UAF due to extensions realloc07:11 UTC derlemesi
CVE-2026-111881
yüksek		freerdp: freerdp: Denial of Service via crafted clipboard bitmap image07:11 UTC derlemesi
CVE-2026-111880
yüksek		freerdp: freerdp: Denial of Service via heap out-of-bounds write in NTLM authentication07:11 UTC derlemesi
CVE-2026-96627
yüksek		Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)07:11 UTC derlemesi
CVE-2026-68498
yüksek		com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names07:11 UTC derlemesi
CVE-2026-62439
yüksek		gimp: gimp: file-pvr Plug-in PVR File Parsing Integer Overflow Heap-based Buffer Overflow Vulnerability07:11 UTC derlemesi
CVE-2026-108372
yüksek		LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files07:11 UTC derlemesi
CVE-2026-102834
yüksek		JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoS07:11 UTC derlemesi
GHSA-6fj4-rcr3-r7rr
yüksek		lopdf has a stack overflow via deeply nested PDF objects07:11 UTC derlemesi
CVE-2026-109461
yüksek		MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint07:11 UTC derlemesi
CVE-2026-97380
yüksek		mariadb: mariadb: Privilege escalation via empty password in GRANT PROXY statement07:11 UTC derlemesi
CVE-2026-86047
yüksek		mariadb: mariadb: SQL injection via improper identifier quoting07:11 UTC derlemesi
CVE-2026-85748
yüksek		mariadb: mariadb: use-after-free in SYS_REFCURSOR during FETCH operations07:11 UTC derlemesi
CVE-2026-102941
yüksek		github.com/gomarkdown/markdown: github.com/gomarkdown/markdown: Denial of Service via short URL parsing07:11 UTC derlemesi
CVE-2026-105958
yüksek		A flaw was found in spice-server. Multiple migration data handlers use ...07:11 UTC derlemesi
CVE-2026-105959
yüksek		spice-server: spice: Heap buffer overflow via GLZ dictionary max_encoders integer truncation07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.