Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-103267
orta
Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via Staff Invite07:11 UTC derlemesi
CVE-2026-103263
orta
tornado: Tornado: Information disclosure via symlink path traversal in StaticFileHandler07:11 UTC derlemesi
CVE-2026-103261
orta
tornado: tornado: Denial of Service (DoS) via unbounded query string parsing07:11 UTC derlemesi
CVE-2026-103641
orta
gegl: gegl04: gegl: out-of-bounds read in the Radiance HDR uncompressed scanline decoder07:11 UTC derlemesi
GHSA-3hv7-mjh2-fv65
orta
Tornado: Unbounded query-string argument count allows event-loop-stalling DoS07:11 UTC derlemesi
GHSA-59cr-6r3x-644w
orta
GitPython submodule update path traversal can write outside the repository07:11 UTC derlemesi
GHSA-whh4-5q6c-9v3x
orta
GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle07:11 UTC derlemesi
CVE-2026-103001
orta
pyjwt: pyjwt: Token validation bypass via options dictionary mutation07:11 UTC derlemesi
CVE-2026-103387
orta
uri-js: uri-js: Denial of Service via crafted mailto URI07:11 UTC derlemesi
CVE-2026-102991
orta
Mako: Path traversal via drive-letter URI on Windows in TemplateLookup07:11 UTC derlemesi
CVE-2026-103500
orta
thunderbird: thunderbird: Heap buffer overflow via opening large emails07:11 UTC derlemesi
CVE-2026-103399
orta
libsoup: SoupServer: HTTP/1 request smuggling via undrained Expect: 100-continue body07:11 UTC derlemesi
CVE-2026-47604
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Information disclosure via missing authorization checks07:11 UTC derlemesi
CVE-2026-47603
orta
nvidia-driver: nvidia-driver: Information disclosure via missing authorization in kernel mode driver07:11 UTC derlemesi
CVE-2026-47598
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via use-after-free in event delivery path07:11 UTC derlemesi
CVE-2026-47586
orta
nvidia-driver: nvidia-driver: arbitrary code execution via kernel module use-after-free07:11 UTC derlemesi
CVE-2026-47584
orta
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel module07:11 UTC derlemesi
CVE-2026-47582
orta
nvidia-driver: nvidia-driver: Code execution via out-of-bounds write in kernel module07:11 UTC derlemesi
CVE-2026-47579
orta
nvidia-driver: nvidia-driver: arbitrary code execution via use-after-free in kernel mode driver07:11 UTC derlemesi
CVE-2026-47568
orta
nvidia-driver: nvidia-driver: Denial of Service via uncontrolled kernel logging07:11 UTC derlemesi
CVE-2026-47567
orta
nvidia-driver: nvidia-driver: Denial of Service via DRM VMA address space exhaustion07:11 UTC derlemesi
CVE-2026-47566
orta
nvidia-driver: nvidia-driver: Denial of Service via kernel memory leak07:11 UTC derlemesi
CVE-2026-47565
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via kernel mode race condition07:11 UTC derlemesi
CVE-2026-47562
orta
nvidia-driver: nvidia-driver: Denial of Service via kernel log injection07:11 UTC derlemesi
CVE-2026-47557
orta
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel mode layer07:11 UTC derlemesi
CVE-2026-47555
orta
nvidia-driver: nvidia-driver: Information disclosure via uninitialized kernel memory copy07:11 UTC derlemesi
CVE-2026-47549
orta
nvidia-driver: nvidia-driver: Denial of Service via NULL pointer dereference in kernel module07:11 UTC derlemesi
CVE-2026-47547
orta
nvidia-driver: nvidia-driver: Arbitrary code execution via improper input validation in firmware07:11 UTC derlemesi
CVE-2026-47546
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via improper input validation in firmware07:11 UTC derlemesi
CVE-2026-47543
orta
nvidia-driver: nvidia-driver: arbitrary code execution via improper input validation in kernel mode layer07:11 UTC derlemesi
CVE-2026-47542
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via improper input validation in kernel mode layer07:11 UTC derlemesi
CVE-2026-47538
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via firmware out-of-bounds write07:11 UTC derlemesi
CVE-2026-47537
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47534
orta
nvidia-driver: nvidia-driver: Denial of Service via divide-by-zero in kernel mode layer07:11 UTC derlemesi
CVE-2026-47533
orta
nvidia-driver: nvidia-driver: arbitrary code execution via kernel-mode array indexing flaw07:11 UTC derlemesi
CVE-2026-47532
orta
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel mode out-of-bounds write07:11 UTC derlemesi
CVE-2026-47531
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via null pointer dereference in kernel mode layer07:11 UTC derlemesi
CVE-2026-47529
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: arbitrary code execution via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47527
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via firmware out-of-bounds read07:11 UTC derlemesi
CVE-2026-47526
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via null pointer dereference in firmware07:11 UTC derlemesi
CVE-2026-47525
orta
nvidia-driver: nvidia-driver: Arbitrary code execution via improper array index validation07:11 UTC derlemesi
CVE-2026-47524
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via out-of-bounds read07:11 UTC derlemesi
CVE-2026-47522
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Arbitrary code execution via improper input validation in kernel mode layer07:11 UTC derlemesi
CVE-2026-47518
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Code execution via improper permission assignment in secure microcontroller07:11 UTC derlemesi
CVE-2026-47517
orta
nvidia-driver: nvidia-driver: Denial of Service via crafted ioctl request07:11 UTC derlemesi
CVE-2026-47515
orta
nvidia-driver: nvidia-driver: Arbitrary code execution via kernel-mode unbounded string operation07:11 UTC derlemesi
CVE-2026-47509
orta
nvidia-driver: nvidia-driver: Arbitrary code execution via out-of-bounds write in kernel mode layer07:11 UTC derlemesi
CVE-2026-47492
orta
nvidia-driver: xorg-x11-drv-nvidia: nvidia-driver: Denial of Service via improper access control in the kernel mode layer07:11 UTC derlemesi
GHSA-97jj-33gv-5xf9
orta
league/commonmark: DisallowedRawHtml bypassed when a disallowed tag name ends the raw-HTML literal07:11 UTC derlemesi
CVE-2026-102983
orta
Astro: Netlify Image CDN allowlist bypass enables SSRF07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.