Vulnerabilities
Critical vulnerabilities the gate already knows.
Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.
Database last updated27 Oct 2026, 13:12 UTC
23critical, last 7 days298high, last 7 days633medium, last 7 days139low, last 7 days| ID | Vulnerability | Severity source / ecosystems | Critical since | Published |
|---|---|---|---|---|
| CVE-2026-99083 critical | kernel: ksmbd: fix heap out-of-bounds write in krb5_authenticate()linux | Red HatRed Hat 9.8debian, echo | 07:13 UTC build | |
| GHSA-xgh2-jgvm-8g78 critical | Unsigned ID tokens (alg none) accepted, allowing authentication bypass in the id_token flowomniauth_oidc | Ruby Advisory DBrubygems | 19:14 UTC build | |
| CVE-2026-99078 critical | In the Linux kernel, the following vulnerability has been resolved: n ...linux, bpftool, kernel6.12 and 7 more | Photon OSPhoton OS, debian, rapidfort amazon linux | 19:10 UTC build | |
| CVE-2026-98959 critical | In the Linux kernel, the following vulnerability has been resolved: b ...linux, bpftool, kernel6.12 and 7 more | Photon OSPhoton OS, debian, rapidfort amazon linux, echo | 19:10 UTC build | |
| CVE-2026-115889 critical | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, th ...rust-wasmtime, wasmtime | GHSAGHSA 10.0debian, rapidfort debian, cargo, echo | 07:11 UTC build | |
| GHSA-cxf3-9h37-7rr8 critical | Echo: Rejected WebSocket upgrades can bypass Echo route-level access controlsgithub.com/labstack/echo/v4, github.com/labstack/echo/v5 | GHSAGHSA 9.1go | 07:11 UTC build | |
| CVE-2026-57116 critical | PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocationpraisonai | GHSAGHSA 9.8pip | 07:11 UTC build | |
| CVE-2026-114612 critical | litellm: LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key | Red HatRed Hat 8.8 | 07:11 UTC build | |
| CVE-2026-97631 critical | edk2: Pre-boot RCE in EDK II PXE driveredk2, edk2-tools, edk2-aarch64 and 4 more | Red HatRed Hat 8.8rapidfort alma, rapidfort Oracle Linux, rapidfort Red Hat, Red Hat, rapidfort fedora +4 | 07:11 UTC build | |
| GHSA-673q-mjm6-r5xr critical | Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arraysnext, @seal-security/next | GHSAGHSA 9.5seal npm, echo npm, npm | 07:11 UTC build | |
| GHSA-cg2g-xh64-v4q7 critical | DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modesdompurify, @seal-security/dompurify | GHSAGHSA 9.2seal npm, echo npm, npm | 07:11 UTC build | |
| GHSA-2464-fhr4-w9xw critical | Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are usednext, @seal-security/next | GHSAGHSA 9.5seal npm, echo npm, npm | 07:11 UTC build | |
| GHSA-9v8h-qqgm-4m35 critical | Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli packagebrotli, brotlicffi | GHSAGHSA 9.2pip | 07:11 UTC build | |
| CVE-2026-115324 critical | mem0ai Databricks vector store vulnerable to SQL injectionmem0ai | GHSAGHSA 9.2pip | 07:11 UTC build | |
| CVE-2026-91403 critical | OpenJDK: Distrust eMudhra intermediate CA certificates due to security concernsjava-21-openjdk, java-21-openjdk-devel, java-21-openjdk-headless and 140 more | Red HatRed Hat 6.8rapidfort alma, Red Hat, amazon linux, rapidfort amazon linux, rapidfort Red Hat +4 | 07:11 UTC build | |
| CVE-2026-114509 critical | Laravel TokenGuard authentication bypass through non-string API credentialslaravel/framework | GHSAGHSA 9.2composer | 07:11 UTC build | |
| CVE-2026-96639 critical | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-fr ...pillow, nemo-gym, nemo-rl-cuda-13.0 and 3 more | GHSAGHSA 9.8chainguard, debian, rapidfort debian, echo, echo pip +1 | 07:11 UTC build | |
| CVE-2026-114406 critical | ca-certificates: Distrust eMudhra intermediate CA certificates due to security concernsca-certificates, rf-ca-certificates, openshift/ose-rhel-coreos-8 and 1 more | Red Hat, AlmaLinux, Oracle, Rocky LinuxRed Hat 6.8rapidfort rocky, Red Hat, alma, rocky, Oracle Linux +4 | 07:11 UTC build | |
| CVE-2026-114139 critical | Sentry-Javascript: Middleware Bypass when using Tunnel route@sentry/nextjs, langfuse-3, langfuse-4 and 3 more | GHSAGHSA 9.1chainguard, echo npm, npm, wolfi | 07:11 UTC build | |
| CVE-2026-109618 critical | php: OOM bailout during request parsing leads to memory corruption and RCEphp, php-bcmath, php-cli and 529 more | NVD, Azure Linux, Bitnami, UbuntuNVD 9.8alma, amazon linux, rocky, rapidfort amazon linux, rapidfort alma +16 | 07:11 UTC build | |
| CVE-2026-71195 critical | manila: manila: Public Manila Share Allows Cross-Project Access-Rule and Export-Metadata Writesmanila, openstack-manila, openstack-manila-share and 3 more | Red HatRed Hat 8.8Red Hat, debian, rapidfort debian, echo | 07:11 UTC build | |
| GHSA-hq85-5cpj-mr62 critical | uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromiseduv, python3-uv | GHSAGHSA 9.1rapidfort alpine, rapidfort Oracle Linux, rapidfort fedora, pip | 07:11 UTC build | |
| GHSA-6q48-6c7w-9gw2 critical | certifi bundles emSign root CAs with compromised intermediate CA keyspython3-certifi, certifi, python-certifi | GHSAGHSA 9.1rapidfort fedora, rapidfort Oracle Linux, echo pip, pip | 07:11 UTC build | |
| CVE-2026-112900 critical | Pillow is a Python imaging library. From 2.6.0 until 13.0.0, Pillow is ...pillow, open-webui, py3-pillow and 9 more | GHSA, BitnamiGHSA 9.2chainguard, debian, rapidfort debian, seal pip, wolfi +5 | 07:11 UTC build | |
| CVE-2026-112403 critical | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's JPEG dec ...pillow, gftools, kserve and 29 more | GHSA, BitnamiGHSA 9.2chainguard, wolfi, debian, rapidfort debian, seal pip +4 | 07:11 UTC build | |
| CVE-2026-112398 critical | Pillow is a Python imaging library. Prior to 13.0.0, Pillow's FlashPix ...pillow, nemo-skills, python-pillow and 1 more | GHSA, BitnamiGHSA 9.2debian, rapidfort debian, seal pip, bitnami, chainguard +4 | 07:11 UTC build | |
| CVE-2026-112393 critical | Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow ha ...pillow, open-webui, py3-pillow and 9 more | NVD, GHSA, BitnamiNVD 9.8chainguard, debian, rapidfort debian, seal pip, wolfi +5 | 07:11 UTC build | |
| CVE-2026-111058 critical | Mercury: Unauthenticated Remote Code Execution via /api/kernelsmercury | GHSAGHSA 9.8pip | 07:11 UTC build | |
| CVE-2026-111057 critical | Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypassmercury | GHSAGHSA 10.0pip | 07:11 UTC build | |
| CVE-2026-96620 critical | Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Executionclaude-agent-sdk | GHSAGHSA 9.2pip | 07:11 UTC build | |
| CVE-2026-111375 critical | freerdp: FreeRDP: Denial of Service via out-of-bounds read in RAIL window titlefreerdp, freerdp-devel, freerdp-libs and 6 more | NVDNVD 9.1rapidfort alma, rapidfort rocky, rapidfort Oracle Linux, rapidfort Red Hat, Red Hat +6 | 07:11 UTC build | |
| CVE-2026-57496 critical | netlicensing-mcp: REST Path Traversal Bypasses Token Redactionnetlicensing-mcp | GHSAGHSA 9.6pip | 07:11 UTC build | |
| CVE-2026-109829 critical | undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect cachingnode-undici, nodejs24, nodejs24-devel and 47 more | NVDNVD 9.1Red Hat, rapidfort Oracle Linux, rapidfort Red Hat, rapidfort alma, amazon linux +7 | 07:11 UTC build | |
| CVE-2026-109383 critical | undici: undici: Certificate validation bypass via dropped TLS options in Agentnode-undici, nodejs24, nodejs24-devel and 57 more | NVDNVD 9.1Red Hat, amazon linux, rapidfort amazon linux, rapidfort Oracle Linux, rapidfort Red Hat +7 | 07:11 UTC build | |
| CVE-2026-110858 critical | GitPython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecpython-git, gitpython, python-gitpython and 4 more | Red HatRed Hat 8.1Red Hat, debian, rapidfort debian, seal pip, echo | 07:11 UTC build | |
| CVE-2026-102748 critical | Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Servicegithub.com/dgraph-io/dgraph/v25 | GHSAGHSA 9.2go | 07:11 UTC build | |
| CVE-2026-73802 critical | gitea-runner: workflow container.options passes host namespaces and capability flags to job container when privileged mode is disabledgitea, gitea-fips, gitea.com/gitea/runner | GHSAGHSA 10.0minimos, go | 07:11 UTC build | |
| CVE-2026-104252 critical | Vitess vttablet /twopcz reflected XSSvitess.io/vitess | GHSAGHSA 9.8go | 07:11 UTC build | |
| CVE-2026-88092 critical | dotnet: ASP.NET Core Tampering Vulnerabilitydotnet-host, dotnet-sdk-8.0, dotnet-sdk-9.0 and 93 more | GHSA, Red Hat, AlmaLinux, Amazon, Bitnami, Oracle, Rocky LinuxGHSA 9.4alma, rocky, rapidfort alma, Oracle Linux, amazon linux +9 | 07:11 UTC build | |
| CVE-2026-70188 critical | dotnet: ASP.NET Core Security Feature Bypass Vulnerabilitydotnet-host, dotnet-sdk-8.0, dotnet-sdk-9.0 and 92 more | GHSA, Red Hat, AlmaLinux, Amazon, Oracle, Rocky LinuxGHSA 9.1alma, rocky, rapidfort alma, Oracle Linux, amazon linux +8 | 07:11 UTC build | |
| CVE-2026-105016 critical | Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution Vulnerabilitydotnet8-runtime, dotnet9-runtime, dotnet10-runtime and 20 more | GHSAGHSA 9.8rapidfort fedora, alpine, nuget | 07:11 UTC build | |
| CVE-2026-92892 critical | github.com/jfrog/jfrog-cli: Potential command execution on the host running JFrog CLI. | Red HatRed Hat 9.0 | 07:11 UTC build | |
| CVE-2026-102989 critical | TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses@tanstack/react-start, @tanstack/solid-start, @tanstack/start-server-core and 1 more | GHSAGHSA 9.3npm | 07:11 UTC build | |
| CVE-2026-97229 critical | ruby: integer overflow issue in CI/CD regular expression compilerruby, ruby-devel, ruby-libs and 46 more | Red Hat, BitnamiBitnami 10.0rapidfort alma, rapidfort Oracle Linux, rapidfort Red Hat, rapidfort rocky, minimos +9 | 07:11 UTC build | |
| CVE-2026-57118 critical | PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpointspraisonaiagents | GHSAGHSA 9.8pip | 07:11 UTC build | |
| CVE-2026-77366 critical | obsidian-tc tokens can access arbitrary configured vaultsobsidian-tc | GHSAGHSA 10.0npm | 07:11 UTC build | |
| CVE-2026-77363 critical | obsidian-tc HTTP transport lacks Origin/DNS-rebinding protection, enabling drive-by vault access on loopbackobsidian-tc | GHSAGHSA 9.7npm | 07:11 UTC build | |
| CVE-2026-108261 critical | TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment@tinacms/app, tinacms | GHSAGHSA 9.3npm | 07:11 UTC build | |
| CVE-2026-107845 critical | Contao: Cross-site scripting in the comments bundlecontao/comments-bundle | GHSAGHSA 9.3composer | 07:11 UTC build | |
| CVE-2026-107722 critical | fast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusionfast-jwt | GHSAGHSA 9.8npm | 07:11 UTC build |
Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.