Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-116172
orta		vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface07:15 UTC derlemesi
CVE-2026-116155
orta		ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak07:15 UTC derlemesi
CVE-2026-116154
orta		ImageMagick: ImageMagick: Denial of Service via XML parsing memory leak07:15 UTC derlemesi
CVE-2026-116141
orta		ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder07:15 UTC derlemesi
CVE-2026-80905
orta		kernel: net: tap: fix wrong transport_header when sending VLAN-tagged frame07:15 UTC derlemesi
CVE-2026-80887
orta		kernel: drm/vmwgfx: use check_add_overflow for shader size+offset bound07:15 UTC derlemesi
CVE-2026-80883
orta		kernel: drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered07:15 UTC derlemesi
CVE-2026-72262
orta		kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get07:15 UTC derlemesi
CVE-2026-93453
orta		SOGo before 5.12.11 constructs password-reset links using the client-s ...19:10 UTC derlemesi
CVE-2024-56830
orta		The Net::EasyTCP package 0.15 through 0.26 for Perl uses Perl's builti ...19:10 UTC derlemesi
CVE-2024-31837
orta		DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string ...19:10 UTC derlemesi
CVE-2026-96405
orta		NLnet Labs Unbound up to and including version 1.26.1 limits compressi ...07:10 UTC derlemesi
CVE-2026-50106
orta		When NLnet Labs Unbound up to and including version 1.26.1 is configur ...07:10 UTC derlemesi
CVE-2026-35501
orta		When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is co ...07:10 UTC derlemesi
CVE-2026-109125
orta		In NLnet Labs Unbound up to and including version 1.26.1, an observabl ...07:10 UTC derlemesi
CVE-2026-101283
orta		iperf3 3.20\u20133.21 (esnet/iperf) has a pre-auth heap buffer overflo ...07:10 UTC derlemesi
CVE-2026-63318
orta		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)07:10 UTC derlemesi
CVE-2026-65928
orta		ELSA-2026-500245: qemu-kvm security update (IMPORTANT)07:10 UTC derlemesi
CVE-2026-98867
orta		kernel: dm-pcache: bound the logical key offset from persistent memory19:09 UTC derlemesi
CVE-2026-98865
orta		kernel: sched_ext: Don't run ops.dequeue() with a DSQ lock held19:09 UTC derlemesi
CVE-2026-89810
orta		kernel: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram19:09 UTC derlemesi
CVE-2026-80891
orta		kernel: KVM: s390: pci: Validate AIBV and AISB before pinning guest pages19:09 UTC derlemesi
openSUSE-SU-2026:12231-1
orta		bind-9.20.30-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12232-1
orta		brotli-1.2.1-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12234-1
orta		chromedriver-156.0.8078.47-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12236-1
orta		docker-compose-5.6.1-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12237-1
orta		git-lfs-3.8.1-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12243-1
orta		libsndfile-devel-1.2.2-7.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12244-1
orta		libtirpc-devel-1.3.8-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12245-1
orta		libmariadbd-devel-12.3.2-3.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12246-1
orta		mihomo-1.19.33-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12247-1
orta		nano-9.3-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12248-1
orta		corepack24-24.22.1-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12249-1
orta		libopenscap33-1.4.6-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12250-1
orta		perl-Mozilla-CA-20261020.0.0-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12251-1
orta		python313-Pillow-13.0.0-2.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12252-1
orta		libruby4_0-4_0-4.0.9-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12254-1
orta		tomcat-9.0.123-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12257-1
orta		libunbound8-1.26.2-1.1 on GA media19:09 UTC derlemesi
CVE-2026-76654
orta		kubelet: kubelet: Subpath symlinking on Windows nodes permits NTLM coercion07:11 UTC derlemesi
CVE-2026-2270
orta		kube-controller-manager: kube-controller-manager: StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation07:11 UTC derlemesi
CVE-2026-115897
orta		serialize-javascript: serialize-javascript: Cross-Site Scripting via improper function escaping07:11 UTC derlemesi
CVE-2026-115892
orta		wasmtime: Wasmtime: Denial of Service via missing payload type validation in guest returns07:11 UTC derlemesi
CVE-2026-115886
orta		mlflow: mlflow: Server-Side Request Forgery via insecure scorer deserialization07:11 UTC derlemesi
CVE-2026-115883
orta		LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores07:11 UTC derlemesi
GHSA-8c8m-p3m8-cjg8
orta		Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient07:11 UTC derlemesi
GHSA-m943-m63m-w62w
orta		Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient07:11 UTC derlemesi
GHSA-85x2-q946-cp5h
orta		Nodemailer: A ">" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name07:11 UTC derlemesi
GHSA-7xgj-8392-5q4r
orta		FastMCP: Post-transform component authorization is skipped on direct calls07:11 UTC derlemesi
GHSA-vqqp-x5qm-5qp4
orta		FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.