Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-98980
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi
CVE-2026-98968
yüksek
In the Linux kernel, the following vulnerability has been resolved: a ...19:10 UTC derlemesi
CVE-2026-98964
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi
CVE-2026-98952
yüksek
In the Linux kernel, the following vulnerability has been resolved: p ...19:10 UTC derlemesi
CVE-2026-98945
yüksek
In the Linux kernel, the following vulnerability has been resolved: H ...19:10 UTC derlemesi
CVE-2026-98944
yüksek
In the Linux kernel, the following vulnerability has been resolved: H ...19:10 UTC derlemesi
CVE-2026-98927
yüksek
In the Linux kernel, the following vulnerability has been resolved: K ...19:10 UTC derlemesi
CVE-2026-98899
yüksek
In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC derlemesi
CVE-2026-101025
yüksek
Description NGINX JavaScript (njs) has a vulnerability where the bui ...07:10 UTC derlemesi
CVE-2026-101019
yüksek
Description NGINX JavaScript (njs) has a vulnerability where the njs X ...07:10 UTC derlemesi
CVE-2026-95394
yüksek
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...07:10 UTC derlemesi
CVE-2026-15957
yüksek
Smithy-RS is a Rust code generation and runtime framework that ge ...07:10 UTC derlemesi
CVE-2026-104269
yüksek
[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]07:10 UTC derlemesi
CVE-2026-16271
yüksek
[hw/display/qxl: validate primary surface stride against width]07:10 UTC derlemesi
CVE-2026-17588
yüksek
[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]07:10 UTC derlemesi
CVE-2026-63321
yüksek
Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemu07:10 UTC derlemesi
CVE-2026-66899
yüksek
[virtio-balloon: fix free-page BH teardown on unrealize]07:10 UTC derlemesi
CVE-2026-66900
yüksek
[hw/net/virtio-net: strip trailing padding when caching RSC segment]07:10 UTC derlemesi
CVE-2026-77913
yüksek
[hw/display/vga: fix text-mode OOB write after a graphics surface switch]07:10 UTC derlemesi
CVE-2026-84788
yüksek
[io/channel-socket: do not treat a zero length write as an error]07:10 UTC derlemesi
SUSE-SU-2026:4890-1
yüksek
Security update for cpupower19:09 UTC derlemesi
SUSE-SU-2026:4891-1
yüksek
Security update for aws-iam-authenticator19:09 UTC derlemesi
SUSE-SU-2026:4892-1
yüksek
Security update for the Linux Kernel19:09 UTC derlemesi
SUSE-SU-2026:4893-1
yüksek
Security update for emacs19:09 UTC derlemesi
SUSE-SU-2026:4895-1
yüksek
Security update for gimp19:09 UTC derlemesi
SUSE-SU-2026:4897-1
yüksek
Security update for cifs-utils19:09 UTC derlemesi
openSUSE-SU-2026:12233-1
yüksek
ca-certificates-mozilla-2.92-2.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12235-1
yüksek
containerized-data-importer1.65-api-1.65.0-4.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12238-1
yüksek
gitoxide-0.61.0-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12239-1
yüksek
go1.27-1.27.3-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12240-1
yüksek
google-guest-agent-20261015.00-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12241-1
yüksek
kubevirt1.8-container-disk-1.8.4-7.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12242-1
yüksek
kubevirt1.9-container-disk-1.9.1-2.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12253-1
yüksek
tekton-cli-0.46.2-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12255-1
yüksek
tomcat10-10.1.61-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12256-1
yüksek
tomcat11-11.0.27-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:12258-1
yüksek
zk-0.15.7-1.1 on GA media19:09 UTC derlemesi
openSUSE-SU-2026:22151-1
yüksek
Security update for php819:09 UTC derlemesi
openSUSE-SU-2026:22152-1
yüksek
Security update for go1.2619:09 UTC derlemesi
openSUSE-SU-2026:22153-1
yüksek
Security update for go1.2719:09 UTC derlemesi
openSUSE-SU-2026:22155-1
yüksek
Security update for cpupower19:09 UTC derlemesi
CVE-2026-115895
yüksek
happy-dom: happy-dom: Arbitrary code execution via unvalidated ECMAScript Module import alias07:11 UTC derlemesi
GHSA-f2hq-32vh-53cc
yüksek
postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words07:11 UTC derlemesi
CVE-2026-115778
yüksek
twisted: twisted: Denial of Service via memory exhaustion during Telnet negotiation07:11 UTC derlemesi
CVE-2026-115776
yüksek
twisted: Twisted: Denial of Service via unbounded IRC buffer07:11 UTC derlemesi
CVE-2026-115775
yüksek
twisted: twisted: Denial of Service via memory exhaustion in XML stream parser07:11 UTC derlemesi
GHSA-q54r-jf2p-rfr2
yüksek
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()07:11 UTC derlemesi
GHSA-9969-6676-49h5
yüksek
Echo: WebSocket proxy can retain connections and handlers after client disconnect07:11 UTC derlemesi
GHSA-h7wr-284f-5qvc
yüksek
Echo: Decompress permits unbounded gzip expansion in v407:11 UTC derlemesi
GHSA-f48p-c9v4-h7xv
yüksek
Echo: BodyDump captures request and response bodies without size limits in v407:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.