Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-110249 low	thunderbird: Denial-of-service in the Exchange email component	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-110036 low	device-mapper-persistent-data: device-mapper-persistent-data: Denial of Service via crafted block indices	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-88834 low	busybox: busybox: httpd user existence oracle in non-default shadow-disabled builds	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-105460 low	bluez: bluez: stack-based out-of-bounds read in btmon via unvalidated num_keys in return_link_keys_evt()	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-107832 low	fastify: fastify: Header validation bypass via incomplete schema case normalization	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-109976 low	clevis: clevis: integer underflow in PKCS#11 data socket handler crashes daemon on unbound client connection	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-109854 low	m17n-lib: Uninitialized stack read in ISO-2022 Compound Text UTF-8 decoding	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-82632 low	Incorrect Authorization in GitLab	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-103549 low	Incorrect Authorization in GitLab	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-100104 low	Server-Side Request Forgery (SSRF) in GitLab	since at least 24 Oct 202607:11 UTC build	13 Oct 2026
CVE-2026-95838 low	github.com/containerd/containerd: containerd: Denial of Service via repeated directory traversals during layer unpacking	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109282 low	ImageMagick: ImageMagick: Denial of Service via type confusion in INFO, JSON, and YAML encoders	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109280 low	ImageMagick: ImageMagick: Denial of Service via use-after-free in -fx option	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109279 low	ImageMagick: ImageMagick: Denial of Service via race condition during security policy access	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109277 low	ImageMagick: ImageMagick: Security policy bypass via -script operation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109274 low	ImageMagick: ImageMagick: Security policy bypass via TOCTOU symlink race condition	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109273 low	ImageMagick: ImageMagick: Information disclosure via crafted PostScript file	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109272 low	ImageMagick: ImageMagick: Denial of Service via crafted PostScript file	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109271 low	ImageMagick: ImageMagick: Denial of service via use-after-free in the WBINFO decoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109270 low	ImageMagick: ImageMagick: Denial of Service via memory leak in the -process option	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109268 low	ImageMagick: ImageMagick: Denial of Service via use-after-free in PDF writer	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109267 low	ImageMagick: ImageMagick: Denial of Service via stack overflow in MSL decoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109264 low	ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109263 low	ImageMagick: ImageMagick: Denial of Service via memory leak in YUV encoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109261 low	ImageMagick: ImageMagick: Denial of Service via memory leak in GIF encoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109260 low	ImageMagick: ImageMagick: Denial of Service via memory leak in PNG encoder	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109258 low	ImageMagick: ImageMagick: Denial of Service via invalid memory free in fx operation	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109247 low	freerdp: freerdp: Information disclosure via clipboard path traversal	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109241 low	freerdp: freerdp: Denial of Service via NULL pointer dereference in video redirection channel	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109240 low	freerdp: freerdp: Denial of Service via unvalidated buffer size in USB redirection	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-105274 low	hex_core: hex: rebar3: hex_core: Denial of Service via uncontrolled decompression of repository responses	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-109195 low	quay: Repository auto-prune policy UUID IDOR in Quay API	since at least 24 Oct 202607:11 UTC build	12 Oct 2026
CVE-2026-107848 low	Contao: Cross-site request forgery in custom backend actions	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
GHSA-w2ch-4xgr-22ww low	Vikunja: Task relation deletion does not check read access to the other task, allowing cross-project relation removal	since at least 24 Oct 202607:11 UTC build	9 Oct 2026
CVE-2026-56857 low	os: golang: golang: Directory traversal via Windows junction handling	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107727 low	strawberry-graphql: strawberry-graphql: Denial of service via uncleared completed subscriptions	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107296 low	msgpack5: Decoding negative int64 values mutates the input buffer	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107676 low	ffmpeg: ffmpeg: Information disclosure via uninitialized memory in HDR metadata processing	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107289 low	pydantic-ai: pydantic-ai: Information disclosure via cloud metadata blocklist bypass	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107288 low	pydantic-ai: pydantic-ai: Domain blocklist bypass via unnormalized hostname comparison	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107570 low	mutt: mutt: Memory corruption via crafted Content-Type header in email template	since at least 24 Oct 202607:11 UTC build	8 Oct 2026
CVE-2026-107283 low	The AsyncHttpClient (AHC) library allows Java applications to easily e ...	since at least 24 Oct 202607:11 UTC build	7 Oct 2026
CVE-2026-107170 low	m17n-lib: NULL dereference in minput_open_im() after failed m17n_init()	since at least 24 Oct 202607:11 UTC build	7 Oct 2026
CVE-2026-106589 low	openssh: OpenSSH: Privilege escalation via retained root privileges in sshd-session	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106588 low	openssh: OpenSSH: Loss of process sandboxing via macOS SDK builds	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106587 low	openssh: OpenSSH: Improper access control via misinterpretation of disabled configuration options	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106584 low	openssh: openssh: Incorrect certificate expiration times via Daylight Saving Time mishandling	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106582 low	openssh: openssh: Information disclosure via shared compression side-channel	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106449 low	org.lz4/lz4-java: lz4-java: Denial of Service via stack exhaustion from empty blocks	since at least 24 Oct 202607:11 UTC build	6 Oct 2026
CVE-2026-106427 low	chromium-browser: Confused deputy in Mobile	since at least 24 Oct 202607:11 UTC build	6 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.