Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-94422
yüksek		xdg-dbus-proxy: xdg-dbus-proxy: message filtering bypass via reply serial allows sandbox escape07:11 UTC derlemesi
CVE-2026-96289
yüksek		thrift: Apache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guard07:11 UTC derlemesi
CVE-2026-96287
yüksek		thrift: Apache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)07:11 UTC derlemesi
CVE-2026-96286
yüksek		thrift: Apache Thrift: Perl servers end `serve()` when serving one connection fails07:11 UTC derlemesi
CVE-2026-96277
yüksek		thrift: thrift: Denial of Service via uncaught exception in Ruby bindings07:11 UTC derlemesi
CVE-2026-94658
yüksek		thrift: thrift: Denial of Service via inefficient algorithmic complexity in Lua bindings07:11 UTC derlemesi
CVE-2026-94657
yüksek		thrift: thrift: Denial of Service via improper resource allocation in JavaME bindings07:11 UTC derlemesi
CVE-2026-94656
yüksek		thrift: Apache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size bound07:11 UTC derlemesi
CVE-2026-94655
yüksek		thrift: Apache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadratic07:11 UTC derlemesi
CVE-2026-94654
yüksek		thrift: thrift: Denial of Service via infinite loop in Python bindings07:11 UTC derlemesi
CVE-2026-85476
yüksek		thrift: Apache Thrift: c_glib `read_all` spins when the underlying read returns 007:11 UTC derlemesi
CVE-2026-83745
yüksek		thrift: thrift: Denial of Service via excessive memory allocation in WebSocket transport07:11 UTC derlemesi
CVE-2026-83663
yüksek		github.com/apache/thrift: Apache Thrift: Denial of Service via unbounded recursion in Go transports07:11 UTC derlemesi
CVE-2026-66859
yüksek		thrift: thrift: Denial of Service via NULL pointer dereference in c_glib bindings07:11 UTC derlemesi
CVE-2026-66858
yüksek		thrift: Apache Thrift: Denial of Service via deeply nested unknown fields07:11 UTC derlemesi
CVE-2026-66837
yüksek		thrift: thrift: Denial of Service via buffer overflow in PHP bindings07:11 UTC derlemesi
CVE-2026-66081
yüksek		thrift: thrift: Denial of Service via uninitialized pointer access in c_glib bindings07:11 UTC derlemesi
CVE-2026-66055
yüksek		thrift: thrift: Denial of Service via uncontrolled resource allocation07:11 UTC derlemesi
CVE-2026-66054
yüksek		thrift: thrift: Denial of Service via improper handling of compressed data07:11 UTC derlemesi
CVE-2026-63772
yüksek		github.com/apache/thrift: Apache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform count07:11 UTC derlemesi
CVE-2026-61374
yüksek		Allocation of Resources Without Limits or Throttling vulnerability in ...07:11 UTC derlemesi
CVE-2026-96294
yüksek		thrift: Apache Thrift: nodejs web server: no `error` listener on an upgraded WebSocket connection07:11 UTC derlemesi
CVE-2026-96292
yüksek		thrift: thrift: Denial of Service via inefficient regular expression evaluation in Lua bindings07:11 UTC derlemesi
CVE-2026-96288
yüksek		thrift: Apache Thrift: Erlang generated struct reads have no recursion-depth guard (unbounded memory)07:11 UTC derlemesi
CVE-2026-94653
yüksek		thrift: Apache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)07:11 UTC derlemesi
CVE-2026-94648
yüksek		thrift: Apache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size bound07:11 UTC derlemesi
CVE-2026-94646
yüksek		thrift: thrift: Denial of Service via prototype pollution in Node.js bindings07:11 UTC derlemesi
CVE-2026-94637
yüksek		github.com/apache/thrift: Apache Thrift: Denial of Service via improper handling of compressed data07:11 UTC derlemesi
CVE-2026-94636
yüksek		thrift: Apache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used up07:11 UTC derlemesi
CVE-2026-90440
yüksek		thrift: thrift: Denial of Service via improper exception handling in TNonblockingServer07:11 UTC derlemesi
CVE-2026-87117
yüksek		thrift: Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec07:11 UTC derlemesi
CVE-2026-86537
yüksek		thrift: thrift: Denial of Service via infinite loop in D language bindings07:11 UTC derlemesi
CVE-2026-86535
yüksek		thrift: thrift: Denial of Service via TJSONProtocol in Node.js bindings07:11 UTC derlemesi
CVE-2026-85088
yüksek		thrift: thrift: Man-in-the-middle attacks via improper certificate validation07:11 UTC derlemesi
CVE-2026-85087
yüksek		thrift: Apache Thrift: Python ≥3.12 host-name check silently becomes a no-op07:11 UTC derlemesi
CVE-2026-85086
yüksek		thrift: thrift: Information disclosure via improper certificate validation in Perl bindings07:11 UTC derlemesi
CVE-2026-82459
yüksek		thrift: thrift: Denial of Service via integer underflow in THeaderTransport07:11 UTC derlemesi
CVE-2026-82458
yüksek		thrift: thrift: Denial of Service via excessive memory allocation07:11 UTC derlemesi
CVE-2026-61373
yüksek		org.apache.thrift/libthrift: Apache Thrift: Denial of Service via unbounded resource allocation in TSaslNonblockingServer07:11 UTC derlemesi
CVE-2026-104418
yüksek		Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files07:11 UTC derlemesi
CVE-2026-104416
yüksek		Ghost 4.39.0 before 6.64.0 Invite Token Disclosure via Admin API07:11 UTC derlemesi
CVE-2026-104414
yüksek		Ghost from 2.5.0 before 6.64.0 Stored XSS via oEmbed Photo Responses07:11 UTC derlemesi
CVE-2026-104413
yüksek		Ghost 5.94.0 before 6.64.0 Stored XSS via Bookmark Card Images07:11 UTC derlemesi
CVE-2026-104411
yüksek		Ghost 6.22.1 before 6.64.0 Stored XSS via Local Storage File Uploads07:11 UTC derlemesi
CVE-2026-96990
yüksek		thrift: Apache Thrift: Erlang thrift_json_protocol reads a whole message with no size bound07:11 UTC derlemesi
CVE-2026-94651
yüksek		improper handling of exceptional conditions, Missing release of resour ...07:11 UTC derlemesi
CVE-2026-94650
yüksek		thrift: thrift: Denial of Service via uncontrolled recursion in C GLib bindings07:11 UTC derlemesi
CVE-2026-94645
yüksek		thrift: Apache Thrift: Node.js `TJSONProtocol` uses a peer-declared container size as an unbounded loop bound07:11 UTC derlemesi
CVE-2026-94644
yüksek		apache/thrift: thrift: Apache Thrift: PHP `TJSONProtocol` string/number readers have no size bound07:11 UTC derlemesi
CVE-2026-94642
yüksek		Uncaught exception vulnerability in Apache Thrift PHP bindings. Thi ...07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.