Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-113797
düşük		Electron: Extension tabs.query returns tab URLs and titles without the tabs permission07:11 UTC derlemesi
CVE-2026-114370
düşük		undertow: undertow: PathResourceManager safePaths check allows sibling-directory symlink traversal07:11 UTC derlemesi
CVE-2026-113786
düşük		pypdf: pypdf: Denial of Service via unintended image parser invocation07:11 UTC derlemesi
CVE-2026-114061
düşük		SvelteKit : XSS via untrusted cache-control header in prerendered page07:11 UTC derlemesi
CVE-2026-114060
düşük		SvelteKit: URL redirection to untrusted site via enhanced form submission07:11 UTC derlemesi
CVE-2026-114049
düşük		vllm: vLLM: Output manipulation via stale token filter reuse in batch processing07:11 UTC derlemesi
CVE-2026-91461
düşük		openjdk: Enhance TLS Extensions (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91409
düşük		openjdk: Enhance QUIC connections (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91402
düşük		openjfx: openjfx: information disclosure via untrusted code execution07:11 UTC derlemesi
CVE-2026-91400
düşük		openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91397
düşük		openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91381
düşük		openjdk: Enhance Font Rendering (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91335
düşük		openjdk: Enhance Image Handling (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91334
düşük		openjdk: Enhance JPEG loading (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-91333
düşük		openjdk: Improve ciphertext handling (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-87367
düşük		openjdk: Enhance Template Handling (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-87292
düşük		openjdk: Enhance Network Clients (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-87255
düşük		openjdk: Enhance Vector Processing (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-83376
düşük		openjdk: Enhance TLS certificate handling (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-113731
düşük		djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool07:11 UTC derlemesi
CVE-2026-113140
düşük		chromium-browser: angle: Use after free in ANGLE07:11 UTC derlemesi
CVE-2026-113029
düşük		chromium-browser: angle: Improper access control in ANGLE07:11 UTC derlemesi
CVE-2026-101779
düşük		mysql: mysql: Partial Denial of Service via Telemetry component07:11 UTC derlemesi
CVE-2026-101513
düşük		mysql: mysql: Denial of Service via physical access07:11 UTC derlemesi
CVE-2026-94266
düşük		curl: curl: password leak in CURLINFO_EFFECTIVE_URL07:11 UTC derlemesi
CVE-2026-94265
düşük		curl: curl: Authorization: Negotiate sent to foreign origin07:11 UTC derlemesi
CVE-2026-92391
düşük		curl: curl: curl_mime_free stack overflow by recursion07:11 UTC derlemesi
CVE-2026-92390
düşük		curl: curl: -J no-clobber guarantee bypassed with 103 early hints07:11 UTC derlemesi
CVE-2026-92389
düşük		curl: curl: TFTP direction confusion07:11 UTC derlemesi
CVE-2026-92387
düşük		curl: curl: never-ending loop via server response omission07:11 UTC derlemesi
CVE-2026-92386
düşük		curl: curl: server-set cookie aborts cookie jar load07:11 UTC derlemesi
CVE-2026-87866
düşük		curl: curl: wolfSSL public-key pinning bypass07:11 UTC derlemesi
CVE-2026-87865
düşük		curl: curl: knownhost callback mismatches key as missing07:11 UTC derlemesi
CVE-2026-87864
düşük		curl: IMAP APPEND plus CRLF conversion command injection07:11 UTC derlemesi
CVE-2026-87863
düşük		curl: curl: Hsts Response Erases Persisted Entries07:11 UTC derlemesi
CVE-2026-87862
düşük		curl: curl: HSTS cache import drops longer-lived child07:11 UTC derlemesi
CVE-2026-87861
düşük		curl: curl: cross-origin reuse of a Negotiate connection07:11 UTC derlemesi
CVE-2026-86415
düşük		curl: curl: auto client cert connection reuse mixup07:11 UTC derlemesi
CVE-2026-86414
düşük		curl: curl: leaking host credentials to HTTP proxy07:11 UTC derlemesi
CVE-2026-107929
düşük		curl: curl: local interface connection reuse mixup07:11 UTC derlemesi
CVE-2026-107928
düşük		curl: curl: info leak uploading over WebSockets with GnuTLS07:11 UTC derlemesi
CVE-2026-86413
düşük		curl: curl: Negotiate credentials sent to redirected origin07:11 UTC derlemesi
CVE-2026-86412
düşük		curl: curl: server-set cookie erases cookie jar07:11 UTC derlemesi
CVE-2026-86411
düşük		curl: curl: FTP connection reuse inherits client-certificate07:11 UTC derlemesi
CVE-2026-86410
düşük		curl: curl: redirect to SFTP or SCP bypasses host verification07:11 UTC derlemesi
CVE-2026-86409
düşük		curl: curl: stale SigV4 headers sent unintended07:11 UTC derlemesi
CVE-2026-113665
düşük		ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints07:11 UTC derlemesi
CVE-2026-113657
düşük		sanitize-html: sanitize-html: arbitrary script execution via namespace-prefixed SVG animation elements07:11 UTC derlemesi
CVE-2026-113651
düşük		ApostropheCMS: Path traversal in uploadfs07:11 UTC derlemesi
CVE-2026-113648
düşük		ApostropheCMS: Missing Authentication in `cleanExport` Route07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.