Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-92205
orta		busybox: busybox: Arbitrary file creation via directory traversal07:11 UTC derlemesi
CVE-2026-114133
orta		Nuxt server islands render `useHeadSafe` input without sanitisation07:11 UTC derlemesi
CVE-2026-114132
orta		Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive07:11 UTC derlemesi
CVE-2026-114131
orta		Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes07:11 UTC derlemesi
CVE-2026-114129
orta		stream-json: stream-json: Denial of Service via deeply nested JSON documents07:11 UTC derlemesi
CVE-2026-114128
orta		astro: astro: Cross-Site Scripting via unescaped dynamic content in script and style elements07:11 UTC derlemesi
CVE-2026-114127
orta		astro: Astro: CSS injection via unvalidated view transition animation properties07:11 UTC derlemesi
CVE-2026-114121
orta		Electron: openExternal permission requests can be attributed to the wrong origin07:11 UTC derlemesi
CVE-2026-113800
orta		Electron: HID and USB permission checks can be attributed to the wrong origin07:11 UTC derlemesi
CVE-2026-113799
orta		Slack Morphism verifier errors disclose valid HMACs in the logs07:11 UTC derlemesi
CVE-2026-113798
orta		Electron: Pointer lock permission requests can be attributed to the wrong frame07:11 UTC derlemesi
CVE-2026-113796
orta		Electron: SameSite cookie restrictions are not applied to windows opened from links07:11 UTC derlemesi
CVE-2026-113795
orta		pypdf: pypdf: Denial of Service via crafted PDF streams with multiple filters07:11 UTC derlemesi
CVE-2026-113794
orta		pypdf: pypdf: Denial of Service via incomplete cross-reference table07:11 UTC derlemesi
CVE-2026-113793
orta		pypdf: pypdf: Denial of Service via crafted cyclic PDF tree07:11 UTC derlemesi
CVE-2026-113792
orta		pypdf: pypdf: Denial of Service via infinite loop in PdfWriter.find_outline_item07:11 UTC derlemesi
CVE-2026-113791
orta		pypdf: pypdf: Denial of Service via excessive memory consumption during content stream parsing07:11 UTC derlemesi
CVE-2026-113790
orta		pypdf: pypdf: Denial of Service via crafted PDF arrays and dictionaries07:11 UTC derlemesi
CVE-2026-113789
orta		pypdf: pypdf: Denial of Service via crafted PDF form fields07:11 UTC derlemesi
CVE-2026-114437
orta		github.com/go-chi/chi: chi: client IP spoofing via unverified direct connection in ClientIPFromXFF middleware07:11 UTC derlemesi
CVE-2026-114386
orta		Pydantic AI Harness tool-call limit bypass in nested CodeMode calls07:11 UTC derlemesi
CVE-2026-105923
orta		qt6: qt6: Denial of Service via crafted SVG in VectorImage07:11 UTC derlemesi
CVE-2026-17557
orta		lm-evaluation-harness: lm-evaluation-harness: SSRF via job-spec model.url with bearer credential forwarding07:11 UTC derlemesi
CVE-2026-93856
orta		cinder: openstack-cinder: Information disclosure via Block Storage API message listing07:11 UTC derlemesi
CVE-2026-92824
orta		libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts07:11 UTC derlemesi
CVE-2026-92823
orta		libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed YAML07:11 UTC derlemesi
CVE-2026-114118
orta		vyper: Vyper: Deployment of empty smart contracts via integer underflow in create_from_blueprint07:11 UTC derlemesi
CVE-2026-114114
orta		vyper: Vyper: Silent constant substitution in compiled code via multi-byte character parsing07:11 UTC derlemesi
CVE-2026-114110
orta		uv: uv: Arbitrary file deletion via directory traversal in package RECORD metadata07:11 UTC derlemesi
CVE-2026-114105
orta		adm-zip: adm-zip: Privilege escalation via unmasked permissions during archive extraction07:11 UTC derlemesi
CVE-2026-114104
orta		adm-zip: adm-zip: Content validation bypass via duplicate archive entry names07:11 UTC derlemesi
CVE-2026-114103
orta		adm-zip: adm-zip: Denial of Service via decompression bomb protection bypass in asynchronous extraction07:11 UTC derlemesi
CVE-2026-114095
orta		dulwich: dulwich: Denial of Service via self-referential packfile delta objects07:11 UTC derlemesi
CVE-2026-114054
orta		vllm: vllm: Denial of Service via cross-request cache key collision07:11 UTC derlemesi
CVE-2026-114047
orta		freerdp: FreeRDP: proxy improper TLS certificate validation allows target impersonation07:11 UTC derlemesi
CVE-2026-114046
orta		freerdp: FreeRDP: null pointer dereference in smartcard emulation via crafted reader name07:11 UTC derlemesi
CVE-2026-114044
orta		freerdp: FreeRDP: Android client heap out-of-bounds read via graphics pipeline07:11 UTC derlemesi
CVE-2026-114043
orta		freerdp: FreeRDP: heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis07:11 UTC derlemesi
CVE-2026-114042
orta		freerdp: FreeRDP: use-after-free in drdynvc virtual channel PDU handling07:11 UTC derlemesi
CVE-2026-114041
orta		freerdp: FreeRDP: Windows RD Gateway consent message heap out-of-bounds read07:11 UTC derlemesi
CVE-2025-71437
orta		uv: uv: Arbitrary file write via crafted symlinks in source distribution extraction07:11 UTC derlemesi
CVE-2026-91487
orta		openjdk: Enhance C2 comparisons (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91464
orta		openjdk: Enhance Kerberos validation (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91463
orta		openjdk: Enhance krb5 client (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91462
orta		openjdk: Enhance krb5 tokens (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91453
orta		openjdk: Improve HTTP headers (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91452
orta		openjdk: Enhance HTTP server (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91451
orta		openjdk: Enhance HTTP server parsing (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91418
orta		openjdk: Enhance GIF loading (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91417
orta		openjdk: Enhance CORBA (Oracle CPU 2026-10)07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.