Attestkeep
Dil: Türkçe
Kayıt ol
Zafiyetler

Gate'in zaten bildiği kritik zafiyetler.

Attestkeep her altı saatte bir Trivy vulnerability database'ini çeker; tarayıcı cluster'ınızın içinde aynı database'i okur. Bunlar database'in bu hafta kritik saydığı kayıtlar ve ne zaman saydığı. Haberin çıktığı an değil, gate'in öğrendiği an.

Database son güncelleme27 Eki 2026, 19:17 UTC
29kritik, son 7 gün411yüksek, son 7 gün649orta, son 7 gün145düşük, son 7 gün
IDZafiyetBu seviyede olduğu tarihYayın
CVE-2026-114727
yüksek		roundcubemail: roundcubemail: Arbitrary code execution via unsafe image resizing07:11 UTC derlemesi
CVE-2026-114663
yüksek		vyper: Vyper: Contract logic corruption via improper name resolution of imported constants07:11 UTC derlemesi
CVE-2026-96778
yüksek		pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow07:11 UTC derlemesi
CVE-2026-96644
yüksek		pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser07:11 UTC derlemesi
CVE-2026-96640
yüksek		pillow: pillow: Denial of Service via duplicate page references in PDF files07:11 UTC derlemesi
CVE-2026-114145
yüksek		GitPython: GitPython: arbitrary code execution via improper submodule path validation07:11 UTC derlemesi
CVE-2026-114144
yüksek		toml: toml-node: Denial of Service via unbounded integer parsing07:11 UTC derlemesi
CVE-2026-114143
yüksek		toml: toml-node: Denial of Service via long dotted keys in TOML input07:11 UTC derlemesi
CVE-2026-114142
yüksek		toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype07:11 UTC derlemesi
CVE-2026-114141
yüksek		toml: toml: Denial of Service via crafted array-of-tables headers07:11 UTC derlemesi
CVE-2026-114140
yüksek		nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor07:11 UTC derlemesi
CVE-2026-114138
yüksek		djangorestframework: djangorestframework: Denial of Service via unbounded Accept header parsing07:11 UTC derlemesi
CVE-2026-114137
yüksek		djangorestframework: djangorestframework: Unauthorized access via improper token revocation in TokenProxy07:11 UTC derlemesi
CVE-2026-114136
yüksek		djangorestframework: djangorestframework: Denial of Service via improper charset handling in JSON parser07:11 UTC derlemesi
CVE-2026-114135
yüksek		jupyter-server: jupyter-server: Unauthorized code execution via missing authorization check in gateway handler07:11 UTC derlemesi
CVE-2026-92183
yüksek		gimp: gimp: Arbitrary code execution via stack-based buffer overflow in APNG parser07:11 UTC derlemesi
CVE-2026-114126
yüksek		storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token07:11 UTC derlemesi
CVE-2026-114125
yüksek		storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions07:11 UTC derlemesi
CVE-2026-110744
yüksek		multicluster-global-hub-operator-bundle: Operator ServiceAccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide07:11 UTC derlemesi
CVE-2026-109619
yüksek		php: fatal error handling retains stale request state leading to use-after-free07:11 UTC derlemesi
CVE-2026-97313
yüksek		bind: bind: Denial of service via assertion failure in RPZ query processing07:11 UTC derlemesi
CVE-2026-96888
yüksek		bind: bind: Denial of Service via assertion failure during redirect processing07:11 UTC derlemesi
CVE-2026-94300
yüksek		bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay07:11 UTC derlemesi
CVE-2026-19630
yüksek		bind: BIND: Denial of Service via unbounded processing of crafted DNS messages07:11 UTC derlemesi
CVE-2026-114113
yüksek		sharp: sharp: arbitrary code execution via crafted image files07:11 UTC derlemesi
CVE-2026-114112
yüksek		sharp: sharp: Arbitrary code execution via crafted image files07:11 UTC derlemesi
CVE-2026-114109
yüksek		uv: uv: Arbitrary code execution via path traversal in entry point names07:11 UTC derlemesi
CVE-2026-114102
yüksek		adm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression07:11 UTC derlemesi
CVE-2026-114098
yüksek		dulwich: Dulwich: Arbitrary code execution via symlink directory traversal during stash pop07:11 UTC derlemesi
CVE-2026-114097
yüksek		dulwich: dulwich: Arbitrary code execution via symlink path traversal during branch filtering07:11 UTC derlemesi
CVE-2026-114096
yüksek		dulwich: dulwich: Arbitrary code execution via symlink following during file checkout07:11 UTC derlemesi
CVE-2026-114094
yüksek		dulwich: Dulwich: Arbitrary code execution via unvalidated drive letters in repository paths07:11 UTC derlemesi
CVE-2026-114055
yüksek		vllm: vLLM: Denial of Service via unvalidated multimodal processor arguments07:11 UTC derlemesi
CVE-2026-114052
yüksek		vllm: vLLM: Denial of Service via unbounded processor caching in MOSS-Audio07:11 UTC derlemesi
CVE-2026-114051
yüksek		vllm: vllm: Denial of Service via improper token parameter validation07:11 UTC derlemesi
CVE-2026-114050
yüksek		vllm: vllm: Denial of Service via multimodal cache desynchronization07:11 UTC derlemesi
CVE-2026-114045
yüksek		freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats07:11 UTC derlemesi
CVE-2026-91415
yüksek		openjdk: Enhance font rendering (Oracle CPU 2026-10)07:11 UTC derlemesi
CVE-2026-113776
yüksek		virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates07:11 UTC derlemesi
CVE-2026-113732
yüksek		virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts07:11 UTC derlemesi
CVE-2026-113729
yüksek		Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization07:11 UTC derlemesi
CVE-2026-113727
yüksek		OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs07:11 UTC derlemesi
CVE-2026-113726
yüksek		virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh07:11 UTC derlemesi
CVE-2026-113344
yüksek		chromium-browser: chromium-browser: Use after free in Performance07:11 UTC derlemesi
CVE-2026-113341
yüksek		chromium-browser: skia: Memory corruption in Skia07:11 UTC derlemesi
CVE-2026-113334
yüksek		chromium-browser: angle: Improper input validation in ANGLE07:11 UTC derlemesi
CVE-2026-113324
yüksek		chromium-browser: chromium-browser: Use after free in GPU07:11 UTC derlemesi
CVE-2026-113323
yüksek		chromium-browser: chromium-browser: Use after free in Chrome for iOS07:11 UTC derlemesi
CVE-2026-113321
yüksek		chromium-browser: chromium-browser: Use after free in Extensions07:11 UTC derlemesi
CVE-2026-113319
yüksek		chromium-browser: chromium-browser: Use after free in Accessibility07:11 UTC derlemesi

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.