Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
openSUSE-SU-2026:22159-1 high	Security update for mozilla-nss, MozillaFirefox	26 Oct 202619:14 UTC build
openSUSE-SU-2026:22167-1 high	Security update for the Linux Kernel	26 Oct 202619:14 UTC build
CVE-2026-116179 high	vllm: vLLM: Denial of Service via video frame limit bypass	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116177 high	vllm: vllm: Denial of Service via unconstrained image decompression	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116176 high	vllm: vllm: Information disclosure via SSRF in X-Request-Id header	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-116149 high	ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images	26 Oct 202607:15 UTC build	25 Oct 2026
CVE-2026-97206 high	NLnet Labs Unbound, 1.22.0 up to and including version 1.26.1, contain ...	26 Oct 202601:20 UTC build	21 Oct 2026
CVE-2026-108985 high	ZDR decoding in libnfs through 6.0.2 before 7613236 has an out-of-boun ...	26 Oct 202601:20 UTC build	12 Oct 2026
CVE-2026-99064 high	In the Linux kernel, the following vulnerability has been resolved: c ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99059 high	In the Linux kernel, the following vulnerability has been resolved: w ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99056 high	In the Linux kernel, the following vulnerability has been resolved: s ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99054 high	In the Linux kernel, the following vulnerability has been resolved: t ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99053 high	In the Linux kernel, the following vulnerability has been resolved: t ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99032 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99030 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99018 high	In the Linux kernel, the following vulnerability has been resolved: r ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99013 high	In the Linux kernel, the following vulnerability has been resolved: B ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99012 high	In the Linux kernel, the following vulnerability has been resolved: B ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-99006 high	In the Linux kernel, the following vulnerability has been resolved: d ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98982 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98980 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98968 high	In the Linux kernel, the following vulnerability has been resolved: a ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98964 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98952 high	In the Linux kernel, the following vulnerability has been resolved: p ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98945 high	In the Linux kernel, the following vulnerability has been resolved: H ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98944 high	In the Linux kernel, the following vulnerability has been resolved: H ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98927 high	In the Linux kernel, the following vulnerability has been resolved: K ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98911 high	In the Linux kernel, the following vulnerability has been resolved: d ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-98899 high	In the Linux kernel, the following vulnerability has been resolved: n ...	25 Oct 202619:10 UTC build	23 Oct 2026
CVE-2026-101025 high	Description NGINX JavaScript (njs) has a vulnerability where the bui ...	25 Oct 202607:10 UTC build	14 Oct 2026
CVE-2026-101019 high	Description NGINX JavaScript (njs) has a vulnerability where the njs X ...	25 Oct 202607:10 UTC build	14 Oct 2026
CVE-2026-95394 high	Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...	25 Oct 202607:10 UTC build	29 Sep 2026
CVE-2026-15957 high	Smithy-RS is a Rust code generation and runtime framework that ge ...	25 Oct 202607:10 UTC build	21 Jul 2026
CVE-2026-104269 high	[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]	25 Oct 202607:10 UTC build
CVE-2026-16271 high	[hw/display/qxl: validate primary surface stride against width]	25 Oct 202607:10 UTC build
CVE-2026-17588 high	[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]	25 Oct 202607:10 UTC build
CVE-2026-63321 high	virtio-net: fix OOB read in RSC receive path	25 Oct 202607:10 UTC build
CVE-2026-66899 high	[virtio-balloon: fix free-page BH teardown on unrealize]	25 Oct 202607:10 UTC build
CVE-2026-66900 high	[hw/net/virtio-net: strip trailing padding when caching RSC segment]	25 Oct 202607:10 UTC build
CVE-2026-77913 high	[hw/display/vga: fix text-mode OOB write after a graphics surface switch]	25 Oct 202607:10 UTC build
CVE-2026-84788 high	[io/channel-socket: do not treat a zero length write as an error]	25 Oct 202607:10 UTC build
SUSE-SU-2026:4890-1 high	Security update for cpupower	24 Oct 202619:09 UTC build
SUSE-SU-2026:4891-1 high	Security update for aws-iam-authenticator	24 Oct 202619:09 UTC build
SUSE-SU-2026:4892-1 high	Security update for the Linux Kernel	24 Oct 202619:09 UTC build
SUSE-SU-2026:4893-1 high	Security update for emacs	24 Oct 202619:09 UTC build
SUSE-SU-2026:4895-1 high	Security update for gimp	24 Oct 202619:09 UTC build
SUSE-SU-2026:4897-1 high	Security update for cifs-utils	24 Oct 202619:09 UTC build
openSUSE-SU-2026:12233-1 high	ca-certificates-mozilla-2.92-2.1 on GA media	24 Oct 202619:09 UTC build
openSUSE-SU-2026:12235-1 high	containerized-data-importer1.65-api-1.65.0-4.1 on GA media	24 Oct 202619:09 UTC build
openSUSE-SU-2026:12238-1 high	gitoxide-0.61.0-1.1 on GA media	24 Oct 202619:09 UTC build

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.