Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-101333
orta
keycloak-services: keycloak-services: Unbounded metric series creation via idp tag on broker login endpoint07:11 UTC derlemesi
CVE-2026-19444
orta
k8s.io/kubectl: Kubernetes kubectl: Arbitrary file write via path traversal on Windows07:11 UTC derlemesi
CVE-2026-94287
orta
libXpm: libXpm: Denial of Service via unsigned integer underflow07:11 UTC derlemesi
CVE-2026-94285
orta
libX11: libX11: Denial of Service via out-of-bounds read in byte-oriented codeset parser07:11 UTC derlemesi
CVE-2026-94284
orta
libX11: libX11: Denial of Service via out-of-bounds read in XIM trigger-key registration parser07:11 UTC derlemesi
CVE-2026-94283
orta
libX11: libX11: Denial of Service via out-of-bounds read in XIM attribute parser07:11 UTC derlemesi
CVE-2026-94282
orta
libXi: libXi: Denial of Service via out-of-bounds read in XI2 event processing07:11 UTC derlemesi
CVE-2026-101017
orta
opendmarc: OpenDMARC: Denial of Service via NULL pointer dereference during subdomain walking in opendmarc_policy.c07:11 UTC derlemesi
CVE-2026-101016
orta
opendmarc: OpenDMARC: Improper policy enforcement via malformed DMARC record tags07:11 UTC derlemesi
CVE-2026-101003
orta
mongoose: mongoose: Denial of Service via stack-based buffer overflow in MQTT broker07:11 UTC derlemesi
CVE-2026-96281
orta
flatpak: flatpak: Unprivileged active user can bypass anti-downgrade checks for system apps/runtimes07:11 UTC derlemesi
CVE-2026-96280
orta
flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems07:11 UTC derlemesi
CVE-2026-96279
orta
flatpak: flatpak: Path traversal issue in OCI archive extraction via hardlinks07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.