Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated28 Oct 2026, 01:21 UTC

27critical, last 7 days 324high, last 7 days 661medium, last 7 days 104low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-91411 medium	openjdk: Enhance JGSS (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91410 medium	openjdk: Enhance zipfs (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91398 medium	openjdk: Enhance SOCKS5 support (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91396 medium	openjdk: Improve Pack200 handling (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91395 medium	openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91394 medium	openjdk: Enhance HTTP client caching (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91382 medium	openjdk: Enhance Image Processing (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91380 medium	openjdk: Enhance Preferences (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91379 medium	openjdk: Enhance JShell (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91375 medium	openjdk: Enhance jmod handling (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91374 medium	openjdk: Enhance jstatd (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91373 medium	openjdk: Enhance TLS handshakes (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-91332 medium	openjdk: Enhance HTTP Client (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-87294 medium	openjdk: Enhance Certificate Name Checks (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-87293 medium	openjdk: Enhance RMI connections (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-87291 medium	openjdk: Enhance HTTP Server (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-87290 medium	openjdk: Enhance XPath Expressions (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83400 medium	openjdk: Enhance XML Processing (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83395 medium	openjdk: Enhance HTTP Client Response Handling (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83387 medium	openjdk: Enhance WebRowSets (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83381 medium	openjdk: Enhance SASL Authentication (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83380 medium	openjdk: Enhance LDAP logins (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83378 medium	openjdk: Improve C2 loop transformations (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-83374 medium	openjdk: Enhance PKCS5 padding (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113730 medium	OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, ...	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113340 medium	chromium-browser: angle: Memory corruption in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113277 medium	chromium-browser: chromium-browser: Out of bounds read in CustomTabs	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113250 medium	chromium-browser: angle: Use after free in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113200 medium	chromium-browser: angle: Use after free in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113157 medium	chromium-browser: angle: Information leak in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113151 medium	chromium-browser: chromium-browser: Out of bounds read in Actor	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113106 medium	chromium-browser: skia: Memory corruption in Skia	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113054 medium	chromium-browser: chromium-browser: Out of bounds read in SiteIsolation	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113050 medium	chromium-browser: chromium-browser: Out of bounds read in HID	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113035 medium	chromium-browser: chromium-browser: Out of bounds read in API	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113010 medium	chromium-browser: chromium-browser: Out of bounds read in Extensions	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-111879 medium	perl-DBI: perl-DBI: Denial of Service via unreleased table lock on error	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101803 medium	mysql: mysql: unauthorized data modification via XML component	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101802 medium	mysql: mysql: Denial of Service via the Server Parser	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101801 medium	mysql: mysql: Denial of Service in Server Optimizer	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101800 medium	mysql: mysql: unauthorized data access via improper privilege controls	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101799 medium	mysql: mysql: Denial of Service via Group Replication GCS	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101798 medium	mysql: mysql: Denial of Service in the server optimizer	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101795 medium	mysql: mysql: Complete service compromise by a local privileged attacker	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101794 medium	mysql: mysql: Denial of Service via XML component flaw	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101789 medium	mysql: mysql: Denial of Service via the Optimizer component	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101788 medium	mysql: mysql: Denial of Service via Server Components Services	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101787 medium	mysql: mysql: Denial of Service via Server Optimizer flaw	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101784 medium	mysql: mysql: Denial of service in query optimizer	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-101780 medium	mysql: mysql: Denial of Service via X Plugin	since at least 24 Oct 202607:11 UTC build	20 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.