Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-96580 high	Gitea Actions memory exhaustion through large static matrices	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-96404 high	code.gitea.io/gitea: Gitea: Authentication bypass via web installer	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-96399 high	Gitea denial of service through external issue tracker patterns	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-94205 high	code.gitea.io/gitea: Gitea Actions: Arbitrary code execution via improperly authorized fork workflows	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-89430 high	Gitea push mirror SSRF and forced writes to internal Git hosts	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-79960 high	Gitea deploy key pushes acting as the repository owner	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-70357 high	Gitea repository migration SSRF through DNS rebinding	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106446 high	handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams)	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106445 high	handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-104636 high	Gitea SSRF through Git HTTP redirects in mirrors and fetches	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-104632 high	Gitea fork workflow approval bypass through cancel and rerun	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-104626 high	Gitea fork workflow job revival through later approval	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-104048 high	sssd: sssd: Authorization bypass via cross-domain username collision in HBAC evaluation	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-103670 high	Gitea trusted workflow cancellation by unapproved fork runs	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-103059 high	code.gitea.io/gitea: Gitea: Authentication bypass via case-insensitive SSH public key lookup	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-103009 high	elasticsearch: Elasticsearch: Information disclosure via crafted cross-cluster search requests	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-103007 high	elasticsearch: Elasticsearch: Privilege escalation via improper enforcement of delegated role permissions	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-102406 high	Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-101027 high	Gitea migration SSRF through ALLOWED_DOMAINS address check bypass	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106443 high	weasyprint: WeasyPrint: Arbitrary code execution via unsafe PostScript image processing	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106442 high	hydra-core: hydra-core: Arbitrary code execution via target blocklist bypass in instantiate()	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106441 high	hydra-core: hydra-core: Arbitrary code execution via unsafe logging configuration	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106440 high	hydra-optuna-sweeper: hydra-optuna-sweeper: Arbitrary code execution via malicious sweep configuration	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106439 high	hydra-core: hydra-core: Arbitrary code execution via mutable execution policy manipulation	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106426 high	chromium-browser: Race condition in Fonts	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106423 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106421 high	chromium-browser: Use after free in PDF	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106419 high	chromium-browser: angle: Use after free in ANGLE	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106412 high	chromium-browser: Race condition in Core	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106411 high	chromium-browser: Use after free in Parser	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106396 high	chromium-browser: Improper input validation in Omnibox	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106393 high	chromium-browser: Use after free in Storage	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106383 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106382 high	chromium-browser: Use after free in Chromecast	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106379 high	chromium-browser: skia: Uninitialized resource in Skia	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106377 high	chromium-browser: Race condition in Fonts	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106376 high	chromium-browser: angle: Uninitialized resource in ANGLE	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106369 high	chromium-browser: Missing authorization in Translate	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106366 high	chromium-browser: Incomplete cleanup in CustomTabs	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106364 high	chromium-browser: Incorrect authorization in Omnibox	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106358 high	chromium-browser: Use after free in Navigation	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106357 high	chromium-browser: Use after free in WebRTC	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106349 high	chromium-browser: Use after free in V8	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106347 high	chromium-browser: Use after free in Track	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106346 high	chromium-browser: Improper state validation in DevTools	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106332 high	chromium-browser: Integer overflow in Compositing	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106329 high	chromium-browser: Incorrect authorization in FileSystem	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106323 high	chromium-browser: Missing authorization in Chrome for iOS	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106318 high	chromium-browser: Use after free in Media	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106308 high	chromium-browser: Incorrect reference resolution in Autofill	since at least 24 Oct 202607:11 UTC build	6 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.