Attestkeep
Language: English
Sign up
Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC
29critical, last 7 days411high, last 7 days649medium, last 7 days145low, last 7 days
IDVulnerabilityRated sincePublished
CVE-2026-98980
high		In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC build
CVE-2026-98968
high		In the Linux kernel, the following vulnerability has been resolved: a ...19:10 UTC build
CVE-2026-98964
high		In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC build
CVE-2026-98952
high		In the Linux kernel, the following vulnerability has been resolved: p ...19:10 UTC build
CVE-2026-98945
high		In the Linux kernel, the following vulnerability has been resolved: H ...19:10 UTC build
CVE-2026-98944
high		In the Linux kernel, the following vulnerability has been resolved: H ...19:10 UTC build
CVE-2026-98927
high		In the Linux kernel, the following vulnerability has been resolved: K ...19:10 UTC build
CVE-2026-98899
high		In the Linux kernel, the following vulnerability has been resolved: n ...19:10 UTC build
CVE-2026-101025
high		Description NGINX JavaScript (njs) has a vulnerability where the bui ...07:10 UTC build
CVE-2026-101019
high		Description NGINX JavaScript (njs) has a vulnerability where the njs X ...07:10 UTC build
CVE-2026-95394
high		Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and ...07:10 UTC build
CVE-2026-15957
high		Smithy-RS is a Rust code generation and runtime framework that ge ...07:10 UTC build
CVE-2026-104269
high		[GHSA-5pww-8rfg-9crf: RFC 2231 filename* parameter bypasses multipart filename rules]07:10 UTC build
CVE-2026-16271
high		[hw/display/qxl: validate primary surface stride against width]07:10 UTC build
CVE-2026-17588
high		[hw/usb/hcd-xhci: Set reentrancy guard in timer functions]07:10 UTC build
CVE-2026-63321
high		Amazon Linux 2023 - ALAS2023-2026-3241: Important priority package update for qemu07:10 UTC build
CVE-2026-66899
high		[virtio-balloon: fix free-page BH teardown on unrealize]07:10 UTC build
CVE-2026-66900
high		[hw/net/virtio-net: strip trailing padding when caching RSC segment]07:10 UTC build
CVE-2026-77913
high		[hw/display/vga: fix text-mode OOB write after a graphics surface switch]07:10 UTC build
CVE-2026-84788
high		[io/channel-socket: do not treat a zero length write as an error]07:10 UTC build
SUSE-SU-2026:4890-1
high		Security update for cpupower19:09 UTC build
SUSE-SU-2026:4891-1
high		Security update for aws-iam-authenticator19:09 UTC build
SUSE-SU-2026:4892-1
high		Security update for the Linux Kernel19:09 UTC build
SUSE-SU-2026:4893-1
high		Security update for emacs19:09 UTC build
SUSE-SU-2026:4895-1
high		Security update for gimp19:09 UTC build
SUSE-SU-2026:4897-1
high		Security update for cifs-utils19:09 UTC build
openSUSE-SU-2026:12233-1
high		ca-certificates-mozilla-2.92-2.1 on GA media19:09 UTC build
openSUSE-SU-2026:12235-1
high		containerized-data-importer1.65-api-1.65.0-4.1 on GA media19:09 UTC build
openSUSE-SU-2026:12238-1
high		gitoxide-0.61.0-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12239-1
high		go1.27-1.27.3-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12240-1
high		google-guest-agent-20261015.00-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12241-1
high		kubevirt1.8-container-disk-1.8.4-7.1 on GA media19:09 UTC build
openSUSE-SU-2026:12242-1
high		kubevirt1.9-container-disk-1.9.1-2.1 on GA media19:09 UTC build
openSUSE-SU-2026:12253-1
high		tekton-cli-0.46.2-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12255-1
high		tomcat10-10.1.61-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12256-1
high		tomcat11-11.0.27-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:12258-1
high		zk-0.15.7-1.1 on GA media19:09 UTC build
openSUSE-SU-2026:22151-1
high		Security update for php819:09 UTC build
openSUSE-SU-2026:22152-1
high		Security update for go1.2619:09 UTC build
openSUSE-SU-2026:22153-1
high		Security update for go1.2719:09 UTC build
openSUSE-SU-2026:22155-1
high		Security update for cpupower19:09 UTC build
CVE-2026-115895
high		happy-dom: happy-dom: Arbitrary code execution via unvalidated ECMAScript Module import alias07:11 UTC build
GHSA-f2hq-32vh-53cc
high		postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words07:11 UTC build
CVE-2026-115778
high		twisted: twisted: Denial of Service via memory exhaustion during Telnet negotiation07:11 UTC build
CVE-2026-115776
high		twisted: Twisted: Denial of Service via unbounded IRC buffer07:11 UTC build
CVE-2026-115775
high		twisted: twisted: Denial of Service via memory exhaustion in XML stream parser07:11 UTC build
GHSA-q54r-jf2p-rfr2
high		gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()07:11 UTC build
GHSA-9969-6676-49h5
high		Echo: WebSocket proxy can retain connections and handlers after client disconnect07:11 UTC build
GHSA-h7wr-284f-5qvc
high		Echo: Decompress permits unbounded gzip expansion in v407:11 UTC build
GHSA-f48p-c9v4-h7xv
high		Echo: BodyDump captures request and response bodies without size limits in v407:11 UTC build

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.