Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme28 Eki 2026, 01:21 UTC
27kritik, son 7 gün324yüksek, son 7 gün661orta, son 7 gün104düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-106574
orta		ImageMagick: ImageMagick: Denial of Service via heap buffer overwrite in distributed pixel cache server07:11 UTC derlemesi
CVE-2026-106572
orta		ImageMagick: ImageMagick: Denial of Service via crafted CALS image07:11 UTC derlemesi
CVE-2026-106571
orta		ImageMagick: ImageMagick: Denial of Service via heap buffer overflow in GetVirtualPixels07:11 UTC derlemesi
CVE-2026-106570
orta		ImageMagick: ImageMagick: Denial of Service via connection exhaustion in distributed pixel cache07:11 UTC derlemesi
CVE-2026-106569
orta		ImageMagick: ImageMagick: Denial of Service via crafted ASE image07:11 UTC derlemesi
CVE-2026-106568
orta		ImageMagick: ImageMagick: Denial of Service via crafted XMP profile07:11 UTC derlemesi
CVE-2026-106566
orta		ImageMagick: ImageMagick: File overwrite via improper delegate symlink cleanup07:11 UTC derlemesi
CVE-2026-106564
orta		ImageMagick: ImageMagick: Denial of Service via crafted EXR image07:11 UTC derlemesi
CVE-2026-62179
orta		PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues07:11 UTC derlemesi
CVE-2026-46570
orta		In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_inde ...07:11 UTC derlemesi
CVE-2026-107174
orta		source-to-image: source-to-image: Security boundary bypass via absolute symbolic link extraction07:11 UTC derlemesi
CVE-2026-107169
orta		m17n-lib: NULL-pointer write in read_mtext_element() on malformed UTF-807:11 UTC derlemesi
CVE-2026-107167
orta		m17n-lib: Heap use-after-free write in re_init_ic()07:11 UTC derlemesi
CVE-2026-106563
orta		Backstage: Improper entity validation in deprecated Kubernetes services endpoint07:11 UTC derlemesi
CVE-2026-106562
orta		plugin-search-backend: plugin-search-backend-module-elasticsearch: Backstage: Information disclosure via search permission filter bypass07:11 UTC derlemesi
CVE-2026-106561
orta		plugin-kubernetes-backend: Backstage plugin-kubernetes-backend: Information disclosure in Kubernetes resource queries07:11 UTC derlemesi
CVE-2026-106560
orta		Backstage: Improper repository path validation in a Scaffolder backend module07:11 UTC derlemesi
CVE-2026-106559
orta		Backstage: Improper input validation in Confluence to Markdown scaffolder module07:11 UTC derlemesi
CVE-2026-106064
orta		GIMP: GIMP: heap buffer overflow in GIF export on oversized image dimensions07:11 UTC derlemesi
CVE-2026-46572
orta		In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ib_c ...07:11 UTC derlemesi
CVE-2026-46571
orta		In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfs_fix_fi ...07:11 UTC derlemesi
CVE-2026-46438
orta		wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry07:11 UTC derlemesi
CVE-2026-46437
orta		wger: API credentials remain valid after logout/password change07:11 UTC derlemesi
CVE-2026-45161
orta		wger: trainer_login accepts GET - CSRF bypass enables forced session rebinding07:11 UTC derlemesi
CVE-2026-42618
orta		In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_deco ...07:11 UTC derlemesi
CVE-2026-42617
orta		In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfs_ir_t ...07:11 UTC derlemesi
CVE-2026-98374
orta		kernel: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()07:11 UTC derlemesi
CVE-2026-98373
orta		kernel: mm/hugetlb: preserve mremap address delta when skipping page tables07:11 UTC derlemesi
CVE-2026-42532
orta		visidata: visidata: Arbitrary file write via path traversal in EmailSheet07:11 UTC derlemesi
CVE-2026-41958
orta		visidata: visidata: Arbitrary file write via path traversal in RemoteZipFile extraction07:11 UTC derlemesi
CVE-2026-107168
orta		m17n-lib: Parser infinite loop on malformed UTF-8 in count_utf_8_chars()07:11 UTC derlemesi
CVE-2026-107151
orta		rubygem-smart_proxy_dynflow: task update and done callbacks accept unauthenticated requests07:11 UTC derlemesi
CVE-2026-103435
orta		claude-code: claude-code: Arbitrary file write via TOCTOU race condition07:11 UTC derlemesi
CVE-2026-107121
orta		keycloak-services: keycloak-services: SMTP STARTTLS plaintext credential and message downgrade07:11 UTC derlemesi
CVE-2026-103870
orta		pulp-rpm: Distribution tree publish creates directories from .treeinfo ids07:11 UTC derlemesi
CVE-2026-103869
orta		pulp-ansible: Bearer tokens are reused across remotes in a worker07:11 UTC derlemesi
CVE-2026-103868
orta		pulp-container: Registry credentials are reused across remotes in a worker07:11 UTC derlemesi
CVE-2026-84897
orta		src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_M07:11 UTC derlemesi
CVE-2026-97208
orta		Gitea push mirror API bypass of DISABLE_NEW_PUSH policy07:11 UTC derlemesi
CVE-2026-96594
orta		Gitea repository media API stored XSS07:11 UTC derlemesi
CVE-2026-89182
orta		Gitea push-to-create bypass of FORCE_PRIVATE policy07:11 UTC derlemesi
CVE-2026-106508
orta		Backstage has potential file exposure through local TechDocs publisher07:11 UTC derlemesi
CVE-2026-106506
orta		plugin-scaffolder-backend: plugin-scaffolder-backend: Information disclosure via improper task list ordering07:11 UTC derlemesi
CVE-2026-106504
orta		plugin-scaffolder-backend: plugin-scaffolder-backend: Sensitive information disclosure via task logs07:11 UTC derlemesi
CVE-2026-106502
orta		plugin-scaffolder-backend: plugin-scaffolder-backend: Information disclosure via task failure events07:11 UTC derlemesi
CVE-2026-106499
orta		plugin-scaffolder-backend: Backstage: Information disclosure via secret leakage in Scaffolder task logs07:11 UTC derlemesi
CVE-2026-106498
orta		@backstage/plugin-catalog-backend: @backstage/plugin-catalog-backend: Information disclosure via improper URL validation in entity placeholders07:11 UTC derlemesi
CVE-2026-106497
orta		plugin-catalog-backend: plugin-catalog-backend: Information disclosure via inconsistent permission evaluation07:11 UTC derlemesi
CVE-2026-106496
orta		plugin-catalog-backend: plugin-catalog-backend: Unintended file access via inconsistent location type enforcement07:11 UTC derlemesi
CVE-2026-105268
orta		code.gitea.io/gitea: Gitea: Unauthorized deletion and renaming of comment attachments via issue attachment API07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.