Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-88815
yüksek
perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting07:11 UTC derlemesi
CVE-2026-87114
yüksek
kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo07:11 UTC derlemesi
CVE-2026-85644
yüksek
perl-XS-Parse-Keyword: perl-XS-Parse-Keyword: Denial of Service via improper array reference validation07:11 UTC derlemesi
CVE-2026-101894
yüksek
@xhmikosr/decompress: @xhmikosr/decompress: Path traversal via symlink chain07:11 UTC derlemesi
CVE-2026-93348
yüksek
unsloth-zoo: unsloth: Unsloth Zoo: Arbitrary code execution via crafted model configuration07:11 UTC derlemesi
GHSA-456v-xq2p-r4cj
yüksek
code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)07:11 UTC derlemesi
CVE-2026-86330
yüksek
noobaa-core: noobaa-core: OS command injection in cluster_internal_api.set_hostname_internal07:11 UTC derlemesi
CVE-2026-101292
yüksek
artemis-core-client: Unsafe Reflection in Apache ActiveMQ Artemis Federation Message Deserialization07:11 UTC derlemesi
CVE-2026-91006
yüksek
org.apache.karaf.instance/org.apache.karaf.instance.core: karaf: Apache Karaf: Arbitrary command execution via unquoted instance options07:11 UTC derlemesi
CVE-2026-94286
yüksek
libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser07:11 UTC derlemesi
CVE-2026-101015
yüksek
opendmarc: OpenDMARC: DMARC policy bypass via Unicode dot character equivalence in policy.c Domain Handler07:11 UTC derlemesi
CVE-2026-101014
yüksek
opendmarc: OpenDMARC: Denial of Service via off-by-one error in opendmarc_util_cleanup07:11 UTC derlemesi
CVE-2026-100888
yüksek
A weakness has been identified in Trusted Domain Project OpenDKIM up t ...07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.