Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98904
orta		kernel: mailbox: imx: Use devm_pm_runtime_enable()19:17 UTC derlemesi
CVE-2026-114610
orta		fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fp ...19:17 UTC derlemesi
CVE-2026-114609
orta		fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's sh ...19:17 UTC derlemesi
CVE-2026-108360
orta		PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading19:17 UTC derlemesi
CVE-2026-114501
orta		pillow: Pillow: Information disclosure via improper memory alignment during Arrow export19:17 UTC derlemesi
CVE-2026-96643
orta		pillow: pillow: Denial of Service via repeated EXIF headers19:17 UTC derlemesi
CVE-2026-112897
orta		pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding19:17 UTC derlemesi
CVE-2026-106414
orta		chromium-browser: Improper input validation in Mobile19:17 UTC derlemesi
CVE-2026-103288
orta		Ghost: Authorization Bypass in Comment Like Feature19:17 UTC derlemesi
CVE-2026-94545
orta		Satori-generated SVG has improper escaping19:17 UTC derlemesi
CVE-2026-98148
orta		kernel: drm/gud: validate GUD_ROTATION_0 is present in supported rotations19:17 UTC derlemesi
CVE-2026-98147
orta		kernel: printk: Don't WARN on kthread_run failure19:17 UTC derlemesi
CVE-2026-60083
orta		SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files19:17 UTC derlemesi
CVE-2026-72207
orta		kernel: ntfs: not change 0-byte $DATA attribute to non-resident19:17 UTC derlemesi
CVE-2026-64601
orta		kernel: ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission19:17 UTC derlemesi
CVE-2026-64580
orta		kernel: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst()19:17 UTC derlemesi
CVE-2024-8928
orta		Amazon Linux 2023 - ALAS2023-2025-845: Medium priority package update for php8.119:17 UTC derlemesi
SUSE-SU-2026:4906-1
orta		Security update for krb519:17 UTC derlemesi
openSUSE-SU-2026:12267-1
orta		amazon-cloudwatch-agent-1.300073.2-2.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12269-1
orta		dlib-devel-20.0.1-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12270-1
orta		flannel-0.28.10-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12272-1
orta		liblldpctl4-1.0.23-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12273-1
orta		benchdnn-3.14-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12274-1
orta		libonnxruntime1-1.31.0-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12275-1
orta		perl-Plack-1.0057-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12276-1
orta		perl-Starman-0.4019-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12277-1
orta		python313-djangorestframework-3.18.2-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12278-1
orta		python313-fpdf2-2.8.9-2.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12279-1
orta		python313-langgraph-sdk-0.4.9-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12280-1
orta		python313-nltk-3.10.4-1.1 on GA media19:17 UTC derlemesi
openSUSE-SU-2026:12281-1
orta		traefik-3.7.16-1.1 on GA media19:17 UTC derlemesi
CVE-2026-107080
orta		openjpeg2: openjpeg2: Denial of Service via out-of-bounds memory access in opj_dwt_encode_and_deinterleave_v07:13 UTC derlemesi
CVE-2026-92171
orta		infinispan-operator: Infinispan Operator: Sensitive information disclosure due pod args store07:13 UTC derlemesi
CVE-2026-116497
orta		gssproxy: gssproxy: NULL pointer dereference in GSSX_INIT_SEC_CONTEXT crashes daemon07:13 UTC derlemesi
CVE-2026-116262
orta		libimobiledevice: libimobiledevice: Denial of Service via heap-based buffer overflow in Web Inspector07:13 UTC derlemesi
CVE-2026-115718
orta		builder: Frappe Builder: Unauthorized resource consumption via missing authorization in improve_prompt07:13 UTC derlemesi
CVE-2026-115717
orta		builder: builder: Information disclosure via Server-Side Request Forgery in convert_to_webp07:13 UTC derlemesi
CVE-2026-99082
orta		kernel: KVM: x86: Use active memslots for the per-vCPU MMIO cache07:13 UTC derlemesi
CVE-2026-99081
orta		kernel: bnxt_en: fix DMA mapping length for padded small packets07:13 UTC derlemesi
CVE-2026-99079
orta		kernel: net/mlx5e: Prevent stale XSK buffer release on refill retry07:13 UTC derlemesi
CVE-2026-99074
orta		kernel: ipv4: stop PMTU walk when nexthop group shrinks07:13 UTC derlemesi
CVE-2026-99073
orta		kernel: ipv4: stop exception dump when nexthop group shrinks07:13 UTC derlemesi
CVE-2026-98903
orta		kernel: mailbox: imx: Add a channel shutdown field07:13 UTC derlemesi
CVE-2026-98902
orta		kernel: md/raid5: let stripe batch bm_seq comparison wrap-safe07:13 UTC derlemesi
CVE-2026-98900
orta		kernel: xen/gntalloc: validate grant count before allocation07:13 UTC derlemesi
CVE-2026-98898
orta		kernel: drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized07:13 UTC derlemesi
CVE-2026-98897
orta		kernel: ksmbd: don't hold ci->m_lock while waiting for a lease break ack07:13 UTC derlemesi
CVE-2026-98896
orta		kernel: thunderbolt: Keep the domain reference while processing hotplug07:13 UTC derlemesi
CVE-2026-98895
orta		kernel: net/mlx5: HWS, Handle destroying table that has a miss table07:13 UTC derlemesi
CVE-2026-98894
orta		kernel: drm/amd/ras: reset CPER ring on corrupt entry size07:13 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.