Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-110249
düşük		thunderbird: Denial-of-service in the Exchange email component07:11 UTC derlemesi
CVE-2026-110036
düşük		device-mapper-persistent-data: device-mapper-persistent-data: Denial of Service via crafted block indices07:11 UTC derlemesi
CVE-2026-88834
düşük		busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds07:11 UTC derlemesi
CVE-2026-105460
düşük		bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()07:11 UTC derlemesi
CVE-2026-107832
düşük		fastify: fastify: Header validation bypass via incomplete schema case normalization07:11 UTC derlemesi
CVE-2026-109976
düşük		clevis: clevis: integer underflow in PKCS#11 data socket handler crashes daemon on unbound client connection07:11 UTC derlemesi
CVE-2026-109854
düşük		m17n-lib: Uninitialized stack read in ISO-2022 Compound Text UTF-8 decoding07:11 UTC derlemesi
CVE-2026-82632
düşük		Incorrect Authorization in GitLab07:11 UTC derlemesi
CVE-2026-103549
düşük		Incorrect Authorization in GitLab07:11 UTC derlemesi
CVE-2026-100104
düşük		Server-Side Request Forgery (SSRF) in GitLab07:11 UTC derlemesi
CVE-2026-95838
düşük		github.com/containerd/containerd: containerd: Denial of Service via repeated directory traversals during layer unpacking07:11 UTC derlemesi
CVE-2026-109282
düşük		ImageMagick: ImageMagick: Denial of Service via type confusion in INFO, JSON, and YAML encoders07:11 UTC derlemesi
CVE-2026-109280
düşük		ImageMagick: ImageMagick: Denial of Service via use-after-free in -fx option07:11 UTC derlemesi
CVE-2026-109279
düşük		ImageMagick: ImageMagick: Denial of Service via race condition during security policy access07:11 UTC derlemesi
CVE-2026-109277
düşük		ImageMagick: ImageMagick: Security policy bypass via -script operation07:11 UTC derlemesi
CVE-2026-109274
düşük		ImageMagick: ImageMagick: Security policy bypass via TOCTOU symlink race condition07:11 UTC derlemesi
CVE-2026-109273
düşük		ImageMagick: ImageMagick: Information disclosure via crafted PostScript file07:11 UTC derlemesi
CVE-2026-109272
düşük		ImageMagick: ImageMagick: Denial of Service via crafted PostScript file07:11 UTC derlemesi
CVE-2026-109271
düşük		ImageMagick: ImageMagick: Denial of service via use-after-free in the WBINFO decoder07:11 UTC derlemesi
CVE-2026-109270
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in the -process option07:11 UTC derlemesi
CVE-2026-109268
düşük		ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer07:11 UTC derlemesi
CVE-2026-109267
düşük		ImageMagick: ImageMagick: Denial of Service via stack overflow in MSL decoder07:11 UTC derlemesi
CVE-2026-109264
düşük		ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder07:11 UTC derlemesi
CVE-2026-109263
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder07:11 UTC derlemesi
CVE-2026-109261
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder07:11 UTC derlemesi
CVE-2026-109260
düşük		ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder07:11 UTC derlemesi
CVE-2026-109258
düşük		ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation07:11 UTC derlemesi
CVE-2026-109247
düşük		freerdp: freerdp: Information disclosure via clipboard path traversal07:11 UTC derlemesi
CVE-2026-109241
düşük		freerdp: freerdp: Denial of Service via NULL pointer dereference in video redirection channel07:11 UTC derlemesi
CVE-2026-109240
düşük		freerdp: freerdp: Denial of Service via unvalidated buffer size in USB redirection07:11 UTC derlemesi
CVE-2026-105274
düşük		hex_core: hex: rebar3: hex_core: Denial of Service via uncontrolled decompression of repository responses07:11 UTC derlemesi
CVE-2026-109195
düşük		quay: Repository auto-prune policy UUID IDOR in Quay API07:11 UTC derlemesi
CVE-2026-107848
düşük		Contao: Cross-site request forgery in custom backend actions07:11 UTC derlemesi
GHSA-w2ch-4xgr-22ww
düşük		Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal07:11 UTC derlemesi
CVE-2026-56857
düşük		os: golang: golang: Directory traversal via Windows junction handling07:11 UTC derlemesi
CVE-2026-107727
düşük		strawberry-graphql: strawberry-graphql: Denial of service via uncleared completed subscriptions07:11 UTC derlemesi
CVE-2026-107296
düşük		msgpack5: Decoding negative int64 values mutates the input buffer07:11 UTC derlemesi
CVE-2026-107676
düşük		ffmpeg: ffmpeg: Information disclosure via uninitialized memory in HDR metadata processing07:11 UTC derlemesi
CVE-2026-107289
düşük		pydantic-ai: pydantic-ai: Information disclosure via cloud metadata blocklist bypass07:11 UTC derlemesi
CVE-2026-107288
düşük		pydantic-ai: pydantic-ai: Domain blocklist bypass via unnormalized hostname comparison07:11 UTC derlemesi
CVE-2026-107570
düşük		mutt: mutt: Memory corruption via crafted Content-Type header in email template07:11 UTC derlemesi
CVE-2026-107283
düşük		The AsyncHttpClient (AHC) library allows Java applications to easily e ...07:11 UTC derlemesi
CVE-2026-107170
düşük		m17n-lib: NULL dereference in minput_open_im() after failed m17n_init()07:11 UTC derlemesi
CVE-2026-106589
düşük		openssh: OpenSSH: Privilege escalation via retained root privileges in sshd-session07:11 UTC derlemesi
CVE-2026-106588
düşük		openssh: OpenSSH: Loss of process sandboxing via macOS SDK builds07:11 UTC derlemesi
CVE-2026-106587
düşük		openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options07:11 UTC derlemesi
CVE-2026-106584
düşük		openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling07:11 UTC derlemesi
CVE-2026-106582
düşük		openssh: openssh: Information disclosure via shared compression side-channel07:11 UTC derlemesi
CVE-2026-106449
düşük		org.lz4/lz4-java: lz4-java: Denial of Service via stack exhaustion from empty blocks07:11 UTC derlemesi
CVE-2026-106427
düşük		chromium-browser: Confused deputy in Mobile07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.