Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 19:17 UTC

29critical, last 7 days 411high, last 7 days 649medium, last 7 days 145low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-114727 high	roundcubemail: roundcubemail: Arbitrary code execution via unsafe image resizing	since at least 24 Oct 202607:11 UTC build	22 Oct 2026
CVE-2026-114663 high	vyper: Vyper: Contract logic corruption via improper name resolution of imported constants	since at least 24 Oct 202607:11 UTC build	22 Oct 2026
CVE-2026-96778 high	pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-96644 high	pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-96640 high	pillow: pillow: Denial of Service via duplicate page references in PDF files	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114145 high	GitPython: GitPython: arbitrary code execution via improper submodule path validation	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114144 high	toml: toml-node: Denial of Service via unbounded integer parsing	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114143 high	toml: toml-node: Denial of Service via long dotted keys in TOML input	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114142 high	toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114141 high	toml: toml: Denial of Service via crafted array-of-tables headers	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114140 high	nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114138 high	djangorestframework: djangorestframework: Denial of Service via unbounded Accept header parsing	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114137 high	djangorestframework: djangorestframework: Unauthorized access via improper token revocation in TokenProxy	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114136 high	djangorestframework: djangorestframework: Denial of Service via improper charset handling in JSON parser	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114135 high	jupyter-server: jupyter-server: Unauthorized code execution via missing authorization check in gateway handler	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-92183 high	gimp: gimp: Arbitrary code execution via stack-based buffer overflow in APNG parser	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114126 high	storybook: storybook: Arbitrary code execution via exposed WebSocket authentication token	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114125 high	storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictions	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-110744 high	multicluster-global-hub-operator-bundle: Operator ServiceAccount granted unrestricted impersonation of users, groups and serviceaccounts cluster-wide	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-109619 high	php: fatal error handling retains stale request state leading to use-after-free	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-97313 high	bind: bind: Denial of service via assertion failure in RPZ query processing	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-96888 high	bind: bind: Denial of Service via assertion failure during redirect processing	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-94300 high	bind: bind: Arbitrary code execution via GSS-TSIG UDP message replay	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-19630 high	bind: BIND: Denial of Service via unbounded processing of crafted DNS messages	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114113 high	sharp: sharp: arbitrary code execution via crafted image files	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114112 high	sharp: sharp: Arbitrary code execution via crafted image files	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114109 high	uv: uv: Arbitrary code execution via path traversal in entry point names	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114102 high	adm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114098 high	dulwich: Dulwich: Arbitrary code execution via symlink directory traversal during stash pop	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114097 high	dulwich: dulwich: Arbitrary code execution via symlink path traversal during branch filtering	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114096 high	dulwich: dulwich: Arbitrary code execution via symlink following during file checkout	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114094 high	dulwich: Dulwich: Arbitrary code execution via unvalidated drive letters in repository paths	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114055 high	vllm: vLLM: Denial of Service via unvalidated multimodal processor arguments	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114052 high	vllm: vLLM: Denial of Service via unbounded processor caching in MOSS-Audio	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114051 high	vllm: vllm: Denial of Service via improper token parameter validation	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114050 high	vllm: vllm: Denial of Service via multimodal cache desynchronization	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-114045 high	freerdp: FreeRDP: heap buffer overflow in server rdpsnd via crafted audio formats	since at least 24 Oct 202607:11 UTC build	21 Oct 2026
CVE-2026-91415 high	openjdk: Enhance font rendering (Oracle CPU 2026-10)	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113776 high	virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113732 high	virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113729 high	Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113727 high	OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113726 high	virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113344 high	chromium-browser: chromium-browser: Use after free in Performance	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113341 high	chromium-browser: skia: Memory corruption in Skia	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113334 high	chromium-browser: angle: Improper input validation in ANGLE	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113324 high	chromium-browser: chromium-browser: Use after free in GPU	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113323 high	chromium-browser: chromium-browser: Use after free in Chrome for iOS	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113321 high	chromium-browser: chromium-browser: Use after free in Extensions	since at least 24 Oct 202607:11 UTC build	20 Oct 2026
CVE-2026-113319 high	chromium-browser: chromium-browser: Use after free in Accessibility	since at least 24 Oct 202607:11 UTC build	20 Oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.