Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated28 Oct 2026, 01:21 UTC

27critical, last 7 days 324high, last 7 days 661medium, last 7 days 104low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-112054 medium	schroedinger: schroedinger: Denial of Service via divide-by-zero error in Dirac stream parsing	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112053 medium	schroedinger: schroedinger: Denial of Service via out-of-bounds read	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112052 medium	libspatialite: libspatialite: Denial of Service via integer overflow during geometry parsing	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112048 medium	libspatialite: libspatialite: Denial of Service via uncontrolled memory allocation during polygon parsing	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112046 medium	org.ow2.asm/asm: OW2 ASM: Denial of Service via infinite loop in Label.resolve()	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112007 medium	schismtracker: Schism Tracker: Denial of Service via crafted ULT module file	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-112006 medium	opentelemetry-exporter-otlp-proto-http: opentelemetry-exporter-otlp-proto-http: Information disclosure via improper TLS certificate validation	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-111997 medium	ip-address: ip-address: Denial of Service via excessive percent characters in IPv6 address input	since at least 24 Oct 202607:11 UTC build	18 Oct 2026
CVE-2026-89088 medium	parted: parted: Denial of Service via heap buffer overflow during FAT16 resize	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-89085 medium	parted: parted: Heap-based buffer overflow via crafted FAT32 filesystem image	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-96628 medium	Arcane: Environment access token bypasses the admin-required authorization gate on `/api/debug/pprof`	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-85985 medium	mariadb: MariaDB: Unauthorized file access via CONNECT engine functions	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-85745 medium	mariadb: mariadb: out-of-bounds read in ST_Area with crafted MULTIPOLYGON	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-111377 medium	freerdp: FreeRDP: Denial of Service via unbounded static channel reassembly	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-111376 medium	freerdp: freerdp: Denial of Service via short clipboard response	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-111374 medium	freerdp: freerdp: Denial of Service via unadvertised camera stream requests	since at least 24 Oct 202607:11 UTC build	16 Oct 2026
CVE-2026-111272 medium	LibRaw: LibRaw: Denial of Service via heap-based out-of-bounds read in Nikon metadata parser	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-110916 medium	chromium-browser: Improper input validation in Desktop	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-110915 medium	chromium-browser: Use after free in Compositing	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-110914 medium	chromium-browser: Memory corruption in Workers	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-92707 medium	dotnet10.0: dotnet8.0: dotnet9.0: dotnet: MessagePack: Nested arrays can blow past buffer length limits	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-63430 medium	ammonia: ammonia: Cross-site scripting via improper MathML namespace handling	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-62322 medium	social-auth-core: social-auth-core: unauthorized account access via missing OAuth state validation in LINE backend	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-111142 medium	zziplib: zziplib: Denial of Service via out-of-bounds read in ZIP central directory parsing	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-111129 medium	assimp: assimp: Denial of Service via invalid animation track targets	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-111128 medium	assimp: assimp: Denial of Service via NULL pointer dereference in Ogre3D importer	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-109131 medium	ansible-ui: ansible-ui: stored XSS via unsafe javascript URL scheme in Hub collection module documentation (formatPartURL)	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-61702 medium	cups: cups: Information disclosure via path traversal in banner processing	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-55480 medium	cups: cups: Arbitrary file overwrite via insecure temporary file handling	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-55414 medium	NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-54683 medium	NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-104266 medium	tinytag: tinytag: Denial of Service via infinite loop in M4A parser	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-102631 medium	In authd before 0.7.1, the user identity matching in UpdateUser ( ...	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-102527 medium	Nuxt OG Image cache poisoning through derivable cache keys on unsigned dynamic image routes	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-88753 medium	markdown2: markdown2: Denial of Service via crafted Markdown document	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-100350 medium	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-100348 medium	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via self-referential schema definitions	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-100347 medium	github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unsupported HTTP methods on static paths	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-98432 medium	kernel: ipv4: free inet_opt and ireq_opt after an RCU grace period	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-19864 medium	org.eclipse.jetty/jetty-security: Eclipse Jetty: Plaintext password disclosure via session persistence	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-18662 medium	org.eclipse.jetty/jetty-security: Eclipse Jetty: Access control bypass via improper security constraint combination	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-18659 medium	org.eclipse.jetty/jetty-security: Eclipse Jetty: Security constraint bypass via HTTP method substrings	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-76184 medium	org.eclipse.jetty/jetty-client: org.eclipse.jetty/jetty-http-tools: jetty-client: Information disclosure via improper redirect path normalization	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-76182 medium	org.eclipse.jetty/jetty-server: org.eclipse.jetty.ee10/jetty-ee10-servlets: org.eclipse.jetty.ee9/jetty-ee9-servlets: org.eclipse.jetty.ee8/jetty-ee8-servlets: Eclipse Jetty: Query parameter injection via unescaped URI paths	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-103224 medium	io.vertx/vertx-mysql-client: vertx-mysql-client: Denial of Service via unbounded memory allocation during packet decoding	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-103223 medium	io.vertx/vertx-pg-client: vertx-pg-client: Denial of Service via unvalidated message length	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-102477 medium	io.vertx/vertx-grpc-server: vertx-grpc-server: Denial of Service via compression bomb	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-102461 medium	io.vertx/vertx-json-schema: vertx-json-schema: Denial of Service via inefficient uniqueItems array validation	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2025-23390 medium	Fleet doesn’t validate a server’s certificate when connecting through SSH	since at least 24 Oct 202607:11 UTC build	15 Oct 2026
CVE-2026-102475 medium	io.vertx/vertx-http-proxy: vertx-http-proxy: Denial of Service via unbounded memory allocation in body transformer	since at least 24 Oct 202607:11 UTC build	15 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.