Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated28 Oct 2026, 01:21 UTC

27critical, last 7 days 324high, last 7 days 661medium, last 7 days 104low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-109311 medium	vllm: vLLM: Denial of Service via crafted IAMF audio file upload	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109303 medium	Parse Server before 8.6.93 and 9.0.0 before 9.10.1 protectedFields Bypass via Relation Count Query	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109302 medium	Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1 GraphQL Schema Disclosure via Persisted Queries	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109281 medium	ImageMagick: ImageMagick: Information disclosure via crafted -fx expression	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109276 medium	ImageMagick: ImageMagick: Denial of Service via temporary file leak in JNG decoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109275 medium	ImageMagick: ImageMagick: Code injection via crafted MVG file	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109269 medium	ImageMagick: ImageMagick: Information disclosure via crafted JPEG file	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109265 medium	ImageMagick: ImageMagick: Denial of Service via malformed XMP profile	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109262 medium	ImageMagick: ImageMagick: Denial of Service via memory leak in SVG encoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109259 medium	ImageMagick: ImageMagick: Information disclosure via crafted TGA image	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109256 medium	freerdp: FreeRDP: Denial of Service via heap buffer overflow during clipboard image conversion	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109255 medium	freerdp: freerdp: Arbitrary code execution via integer truncation in license stream validation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109254 medium	freerdp: freerdp: Denial of Service via use-after-free during audio channel disconnect	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109253 medium	freerdp: freerdp: Denial of Service via out-of-bounds read in RDPEAR	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109252 medium	freerdp: freerdp: Denial of Service via truncated authentication data	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109251 medium	freerdp: FreeRDP: Denial of Service via invalid video geometry coordinates	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109250 medium	freerdp: FreeRDP: arbitrary code execution via heap buffer overflow during smartcard key enumeration	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109249 medium	freerdp: FreeRDP: Denial of Service via crafted Remote Assistance file	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109248 medium	freerdp: freerdp: Denial of Service via heap out-of-bounds read in clipboard handling	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109246 medium	freerdp: freerdp: Denial of Service via divide-by-zero error in shadow server	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109245 medium	freerdp: freerdp: Information disclosure via improper TLS certificate validation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109244 medium	freerdp: freerdp: Information disclosure via insecure file permissions in winpr-makecert	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109243 medium	freerdp: freerdp: Information disclosure via insecure private key permissions	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-96618 medium	hex: hex: Denial of Service via unconstrained data decompression	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-81856 medium	hex: hex: Terminal output spoofing via unescaped control sequences	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109194 medium	quay: Build trigger UUID IDOR in Quay API	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-105668 medium	hex: hex: Release cooldown protection bypass via retired package releases	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-105280 medium	hex: hex: Integrity check bypass via standard output package fetch	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-103503 medium	hex: hex: Host impersonation via improper CA certificate store validation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-103502 medium	hex_core: hex_core: Server impersonation via improper TLS certificate validation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109082 medium	keycloak-services: keycloak-services: CIBA confidential-only contract not enforced for public clients	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-98385 medium	kernel: sched/cache: Decouple sched_cache_group from mm to fix UAF	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-107203 medium	foreman: domain and subnet interface API skips host search filters	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-107193 medium	foreman: API filter lookup ignores a search-limited filter permission	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-108858 medium	lorax: lorax: Information disclosure via API token logging	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108752 medium	JupyterHub through 6.0.1 contains an identifier collision vulnerabilit ...	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108575 medium	litellm: LiteLLM: Improper authorization via api_key parameter manipulation	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108574 medium	litellm: litellm: Authorization bypass via session identifier manipulation	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108573 medium	assimp: assimp: Denial of Service via out-of-bounds read in PLY file handler	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108693 medium	ImageMagick: ImageMagick: Arbitrary code execution via insecure search path	since at least 24 Oct 202607:11 UTC build	11 Oct 2026
CVE-2026-108597 medium	cohere: cohere: Arbitrary file overwrite via path traversal in archive extraction	since at least 24 Oct 202607:11 UTC build	10 Oct 2026
CVE-2026-17025 medium	graphene: graphene: Stored Cross-Site Scripting via profile fields	since at least 24 Oct 202607:11 UTC build	10 Oct 2026
CVE-2026-108258 medium	Shiny for Python has path traversal in bookmark restore	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
CVE-2026-107851 medium	Contao: Improper access control in the table access voter	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
CVE-2026-107850 medium	Contao: Improper access control in the preview links module	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-fmmf-xq98-g327 medium	Vikunja: Write-level project members can delete admin-tier link shares through an unloaded permission check	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-pjr3-86v4-5p7w medium	Vikunja: Explicit lower-permission share on a sub-project is silently overridden by an inherited parent permission (broken access control / privilege-management regression in v2.6.0)	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-hjx8-qv73-f7cm medium	Vikunja: Webhooks and link shares survive every revocation path, so a removed collaborator keeps a live feed	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-fprf-r6rv-xg99 medium	Vikunja: Saved filter creation with an empty filter string recalculates task positions across all tenants	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-4hv6-xc92-j86g medium	Vikunja: WebSocket authentication ignores server-side session state, so revoked sessions keep receiving live pushes	since at least 24 Oct 202607:11 UTC build	9 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.