Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-96580
yüksek		Gitea Actions memory exhaustion through large static matrices07:11 UTC derlemesi
CVE-2026-96404
yüksek		code.gitea.io/gitea: Gitea: Authentication bypass via web installer07:11 UTC derlemesi
CVE-2026-96399
yüksek		Gitea denial of service through external issue tracker patterns07:11 UTC derlemesi
CVE-2026-94205
yüksek		code.gitea.io/gitea: Gitea Actions: Arbitrary code execution via improperly authorized fork workflows07:11 UTC derlemesi
CVE-2026-89430
yüksek		Gitea push mirror SSRF and forced writes to internal Git hosts07:11 UTC derlemesi
CVE-2026-79960
yüksek		Gitea deploy key pushes acting as the repository owner07:11 UTC derlemesi
CVE-2026-70357
yüksek		Gitea repository migration SSRF through DNS rebinding07:11 UTC derlemesi
CVE-2026-106446
yüksek		handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)07:11 UTC derlemesi
CVE-2026-106445
yüksek		handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass07:11 UTC derlemesi
CVE-2026-104636
yüksek		Gitea SSRF through Git HTTP redirects in mirrors and fetches07:11 UTC derlemesi
CVE-2026-104632
yüksek		Gitea fork workflow approval bypass through cancel and rerun07:11 UTC derlemesi
CVE-2026-104626
yüksek		Gitea fork workflow job revival through later approval07:11 UTC derlemesi
CVE-2026-104048
yüksek		sssd: sssd: Authorization bypass via cross-domain username collision in HBAC evaluation07:11 UTC derlemesi
CVE-2026-103670
yüksek		Gitea trusted workflow cancellation by unapproved fork runs07:11 UTC derlemesi
CVE-2026-103059
yüksek		code.gitea.io/gitea: Gitea: Authentication bypass via case-insensitive SSH public key lookup07:11 UTC derlemesi
CVE-2026-103009
yüksek		elasticsearch: Elasticsearch: Information disclosure via crafted cross-cluster search requests07:11 UTC derlemesi
CVE-2026-103007
yüksek		elasticsearch: Elasticsearch: Privilege escalation via improper enforcement of delegated role permissions07:11 UTC derlemesi
CVE-2026-102406
yüksek		Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception07:11 UTC derlemesi
CVE-2026-101027
yüksek		Gitea migration SSRF through ALLOWED_DOMAINS address check bypass07:11 UTC derlemesi
CVE-2026-106443
yüksek		weasyprint: WeasyPrint: Arbitrary code execution via unsafe PostScript image processing07:11 UTC derlemesi
CVE-2026-106442
yüksek		hydra-core: hydra-core: Arbitrary code execution via target blocklist bypass in instantiate()07:11 UTC derlemesi
CVE-2026-106441
yüksek		hydra-core: hydra-core: Arbitrary code execution via unsafe logging configuration07:11 UTC derlemesi
CVE-2026-106440
yüksek		hydra-optuna-sweeper: hydra-optuna-sweeper: Arbitrary code execution via malicious sweep configuration07:11 UTC derlemesi
CVE-2026-106439
yüksek		hydra-core: hydra-core: Arbitrary code execution via mutable execution policy manipulation07:11 UTC derlemesi
CVE-2026-106426
yüksek		chromium-browser: Race condition in Fonts07:11 UTC derlemesi
CVE-2026-106423
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-106421
yüksek		chromium-browser: Use after free in PDF07:11 UTC derlemesi
CVE-2026-106419
yüksek		chromium-browser: angle: Use after free in ANGLE07:11 UTC derlemesi
CVE-2026-106412
yüksek		chromium-browser: Race condition in Core07:11 UTC derlemesi
CVE-2026-106411
yüksek		chromium-browser: Use after free in Parser07:11 UTC derlemesi
CVE-2026-106396
yüksek		chromium-browser: Improper input validation in Omnibox07:11 UTC derlemesi
CVE-2026-106393
yüksek		chromium-browser: Use after free in Storage07:11 UTC derlemesi
CVE-2026-106383
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-106382
yüksek		chromium-browser: Use after free in Chromecast07:11 UTC derlemesi
CVE-2026-106379
yüksek		chromium-browser: skia: Uninitialized resource in Skia07:11 UTC derlemesi
CVE-2026-106377
yüksek		chromium-browser: Race condition in Fonts07:11 UTC derlemesi
CVE-2026-106376
yüksek		chromium-browser: angle: Uninitialized resource in ANGLE07:11 UTC derlemesi
CVE-2026-106369
yüksek		chromium-browser: Missing authorization in Translate07:11 UTC derlemesi
CVE-2026-106366
yüksek		chromium-browser: Incomplete cleanup in CustomTabs07:11 UTC derlemesi
CVE-2026-106364
yüksek		chromium-browser: Incorrect authorization in Omnibox07:11 UTC derlemesi
CVE-2026-106358
yüksek		chromium-browser: Use after free in Navigation07:11 UTC derlemesi
CVE-2026-106357
yüksek		chromium-browser: Use after free in WebRTC07:11 UTC derlemesi
CVE-2026-106349
yüksek		chromium-browser: Use after free in V807:11 UTC derlemesi
CVE-2026-106347
yüksek		chromium-browser: Use after free in Track07:11 UTC derlemesi
CVE-2026-106346
yüksek		chromium-browser: Improper state validation in DevTools07:11 UTC derlemesi
CVE-2026-106332
yüksek		chromium-browser: Integer overflow in Compositing07:11 UTC derlemesi
CVE-2026-106329
yüksek		chromium-browser: Incorrect authorization in FileSystem07:11 UTC derlemesi
CVE-2026-106323
yüksek		chromium-browser: Missing authorization in Chrome for iOS07:11 UTC derlemesi
CVE-2026-106318
yüksek		chromium-browser: Use after free in Media07:11 UTC derlemesi
CVE-2026-106308
yüksek		chromium-browser: Incorrect reference resolution in Autofill07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.