Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-111763
orta		A2A Java SDK send client credentials under server-controlled HTTP header name, enabling leakage via redirect07:11 UTC derlemesi
CVE-2026-112944
orta		launch-editor: launch-editor: Arbitrary command execution via improper filename handling07:11 UTC derlemesi
CVE-2026-112940
orta		filelock: filelock: Arbitrary file overwrite via insecure database file reopening07:11 UTC derlemesi
CVE-2026-112939
orta		filelock: filelock: Unauthorized lock acquisition via forged process identifier in SoftFileLock07:11 UTC derlemesi
CVE-2026-112937
orta		filelock is a platform-independent file lock for Python. From 4.1.0 un ...07:11 UTC derlemesi
CVE-2026-112936
orta		filelock: filelock: Lock redirection and mutual exclusion bypass via symbolic links07:11 UTC derlemesi
CVE-2026-112935
orta		filelock: filelock: Unauthorized concurrent access via stale lock cleanup race condition07:11 UTC derlemesi
CVE-2026-112934
orta		filelock: filelock: Denial of Service via insecure holder record refresh07:11 UTC derlemesi
CVE-2026-112915
orta		filelock: filelock: Denial of Service via crafted SQLite lock database07:11 UTC derlemesi
CVE-2026-112914
orta		filelock: filelock: Unauthorized file exposure via symbolic link manipulation in SoftFileLock07:11 UTC derlemesi
CVE-2026-112911
orta		filelock: filelock: Lock bypass via pre-created shared protocol directory07:11 UTC derlemesi
CVE-2026-112909
orta		filelock: filelock: arbitrary file truncation via lock path replacement07:11 UTC derlemesi
CVE-2026-112906
orta		filelock: filelock: Mutual exclusion bypass via improper stale lock removal07:11 UTC derlemesi
CVE-2026-111762
orta		A2A Java SDK: Push notification credentials logged in cleartext on protobuf parse failure07:11 UTC derlemesi
CVE-2026-111761
orta		A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery07:11 UTC derlemesi
CVE-2026-93446
orta		tomcat: Apache Tomcat: Possible TLS 1.3 connection failures07:11 UTC derlemesi
CVE-2026-103119
orta		tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes07:11 UTC derlemesi
CVE-2026-101356
orta		tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing07:11 UTC derlemesi
CVE-2026-113470
orta		firefox: Firefox: Website spoofing via failure to block compromised intermediate certificates07:11 UTC derlemesi
CVE-2026-113401
orta		Denial-of-service in the PDF Viewer component. This vulnerability ...07:11 UTC derlemesi
CVE-2026-113400
orta		Uninitialized memory in the Audio/Video: cubeb component. This vu ...07:11 UTC derlemesi
CVE-2026-113399
orta		Incorrect boundary conditions in the SVG component. This vulnerab ...07:11 UTC derlemesi
CVE-2026-113351
orta		expat: expat: Denial of Service via improper memory tracking in XML_ParserReset07:11 UTC derlemesi
CVE-2026-92287
orta		arrow: pyarrow: arrow: Information disclosure via unvalidated KMS URLs in Parquet files07:11 UTC derlemesi
CVE-2026-110306
orta		fast-uri: fast-uri: Cross-Site Scripting via improper URI scheme decoding07:11 UTC derlemesi
CVE-2026-110180
orta		fast-uri: fast-uri: Security policy bypass via improper host canonicalization07:11 UTC derlemesi
CVE-2026-112898
orta		pillow: Pillow: Information disclosure via empty palette quantization07:11 UTC derlemesi
CVE-2026-112300
orta		configobj: configobj: Denial of Service via inefficient regular expression evaluation07:11 UTC derlemesi
CVE-2026-112259
orta		gimp: gimp: NULL pointer dereference in SwatchBooker (SBZ) palette import07:11 UTC derlemesi
CVE-2026-111757
orta		hono: hono: Information disclosure via malformed percent-encoded paths in serveStatic07:11 UTC derlemesi
CVE-2026-111755
orta		follow-redirects: follow-redirects: Information disclosure via improper regular expression escaping in sensitive header filtering07:11 UTC derlemesi
CVE-2025-52290
orta		ffmpeg: ffmpeg: Denial of Service via crafted media file07:11 UTC derlemesi
CVE-2026-111750
orta		aiohttp: aiohttp: HTTP request smuggling via ambiguous request framing07:11 UTC derlemesi
CVE-2026-111749
orta		aiohttp: aiohttp: Host-Only cookie protection bypass via untrusted subdomain07:11 UTC derlemesi
CVE-2026-111748
orta		aiohttp: aiohttp: Security control bypass via request scheme spoofing07:11 UTC derlemesi
CVE-2026-111065
orta		aiohttp: aiohttp: Denial of Service via Max-Age processing overflow07:11 UTC derlemesi
CVE-2026-111061
orta		russh: russh: Denial of Service via resource exhaustion in SSH agent07:11 UTC derlemesi
CVE-2026-111059
orta		Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML07:11 UTC derlemesi
GHSA-953h-535j-jg2v
orta		agent-router: MCP session resume does not verify the embedded anti-hijacking subject; default Helm seed makes session IDs forgeable07:11 UTC derlemesi
GHSA-pcc4-rvhr-2pr8
orta		Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo07:11 UTC derlemesi
CVE-2026-112282
orta		libbluray: libbluray: Denial of Service via out-of-bounds read in clpi_access_point()07:11 UTC derlemesi
CVE-2026-112279
orta		rdesktop: rdesktop: Denial of Service via crafted bitmap cache orders07:11 UTC derlemesi
CVE-2026-112278
orta		rdesktop: rdesktop: Denial of Service via heap out-of-bounds read in process_raw_bmpcache07:11 UTC derlemesi
CVE-2026-112277
orta		rdesktop: rdesktop: Denial of Service via malformed compressed bitmaps07:11 UTC derlemesi
CVE-2026-112272
orta		libdisplay-info: libdisplay-info: Denial of Service via out-of-bounds read in DisplayID parser07:11 UTC derlemesi
CVE-2026-112271
orta		libdisplay-info: libdisplay-info: Denial of Service via out-of-bounds read in DisplayID parser07:11 UTC derlemesi
CVE-2026-111883
orta		locust: locust: Denial of Service via Cross-Site Request Forgery in web interface07:11 UTC derlemesi
CVE-2026-112214
orta		gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser07:11 UTC derlemesi
CVE-2026-84180
orta		org.apache.camel/camel-knative: camel-knative: Information disclosure via error responses07:11 UTC derlemesi
CVE-2026-112027
orta		cms: light0011 cms: Information disclosure via filename manipulation in Uploadify07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.