Vulnerabilities

Critical vulnerabilities the gate already knows.

Every six hours Attestkeep pulls the Trivy vulnerability database, the same one its scanner reads inside your cluster. These are the entries the database rated critical this week, and when it did. Not when the news broke: when the gate knew.

Database last updated27 Oct 2026, 13:12 UTC

23critical, last 7 days 298high, last 7 days 633medium, last 7 days 139low, last 7 days

ID	Vulnerability	Rated since	Published
CVE-2026-116260 high	libimobiledevice: libimobiledevice: Denial of Service via double free in service_receive	27 Oct 202607:13 UTC build	26 Oct 2026
CVE-2026-104849 high	tinypool: Tinypool: Prototype Pollution Gadget to RCE in run() options	27 Oct 202607:13 UTC build	2 Oct 2026
CVE-2024-8928 high	Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-8928: php: Erroneous p	27 Oct 202607:13 UTC build
CVE-2026-116124 high	libgsf: libgsf: Arbitrary code execution via heap-based buffer overflow in OLE2 parser	27 Oct 202601:25 UTC build	26 Oct 2026
CVE-2026-105483 high	nodejs: nodejs: TLS certificate hostname bypass via fullwidth-digit IP hostnames	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-55888 high	xdg-desktop-portal: xdg-desktop-portal: Unauthorized host file access via unvalidated FileChooser filenames	27 Oct 202601:25 UTC build	23 Oct 2026
CVE-2026-110354 high	haproxy: haproxy: Denial of Service via specially crafted HTTP/1.1 chunked request	27 Oct 202601:25 UTC build	22 Oct 2026
CVE-2026-110353 high	haproxy: HAProxy: Denial of Service via truncated HTTP/2 PING frame	27 Oct 202601:25 UTC build	22 Oct 2026
CVE-2026-98869 high	kernel: bpf: Infer zext_dst based on static register liveness analysis	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2023-7356 high	kernel: Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2026-111943 high	crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates	27 Oct 202601:25 UTC build	21 Oct 2026
CVE-2026-113812 high	perl-mozilla-ca: Mozilla::CA: TLS server impersonation via compromised intermediate certificates	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2025-71436 high	raptor2: raptor2: arbitrary code execution via heap-based buffer overflow in language tag handling	27 Oct 202601:25 UTC build	20 Oct 2026
CVE-2026-112396 high	pillow: pillow: arbitrary code execution via heap use-after-free during TIFF encoding	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112258 high	gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112395 high	pillow: pillow: Information disclosure via crafted tiled TIFF image	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-112394 high	pillow: pillow: Information disclosure via out-of-bounds read in raw decoders	27 Oct 202601:25 UTC build	19 Oct 2026
CVE-2026-98857 high	kernel: ipvs: bound LBLCR and LBLC cache growth	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98853 high	kernel: net: gso: limit recursive IP-in-IP segmentation	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98769 high	kernel: usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98725 high	kernel: nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98718 high	kernel: KVM: SEV: Do cache maintenance on the source VM before clearing SEV state	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98715 high	kernel: KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98639 high	kernel: KVM: riscv: Fix NACL hfence entry update order	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98621 high	kernel: net: gue: reject invalid REMCSUM offsets	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98614 high	kernel: sctp: avoid livelock while updating retransmit path	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-98466 high	kernel: KVM: arm64: Transfer the hyp stack pages out of the host stage-2	27 Oct 202601:25 UTC build	18 Oct 2026
CVE-2026-110752 high	perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selector	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-92262 high	mariadb: MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-85746 high	mariadb: MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-104715 high	cifs-utils: mount.cifs credential-file option injection allows local privilege boundary bypass	27 Oct 202601:25 UTC build	16 Oct 2026
CVE-2026-98417 high	kernel: net: xfrm: reject unrepresentable espintcp transport headers	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-86476 high	gstreamer1-plugins-base: gst-plugins-base: heap buffer overflow via unvalidated GstVideoMeta plane extents in gst_video_frame_map_id and video_meta_deserialize	27 Oct 202601:25 UTC build	14 Oct 2026
CVE-2026-106062 high	gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file	27 Oct 202601:25 UTC build	6 Oct 2026
CVE-2019-25777 high	perl-yaml: perl-yaml: Arbitrary code execution via unrestricted package variable assignment	27 Oct 202601:25 UTC build	5 Oct 2026
CVE-2017-20285 high	perl-yaml: perl-yaml: Arbitrary destructor method execution via crafted YAML document	27 Oct 202601:25 UTC build	5 Oct 2026
CVE-2026-103226 high	ghostscript: ghostscript: stack-based buffer overflow in pdfwrite via crafted font data	27 Oct 202601:25 UTC build	30 Sep 2026
CVE-2026-109411 high	samba: Access control bypass via vfs_ceph_rgw case-insensitive open	27 Oct 202601:25 UTC build
GHSA-qpg5-fx6p-8cq3 high	Using port forwarding silently enables server access to the local SSH agent	27 Oct 202601:25 UTC build
GHSA-vxj5-fg65-x765 high	net-ssh - SSH host-certificate authentication bypass — @cert-authority verifier skips valid_principals / validity window / cert type / critical options, so any CA-signed cert impersonates any host trusting that CA (CWE-295)	27 Oct 202601:25 UTC build
CVE-2026-116191 high	github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service	26 Oct 202619:14 UTC build	25 Oct 2026
CVE-2026-116189 high	github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass	26 Oct 202619:14 UTC build	25 Oct 2026
CVE-2026-68476 high	kernel: ipvs: reload ip header after head reallocation	26 Oct 202619:14 UTC build	15 Aug 2026
CVE-2026-14803 high	Mojo::JSON: Mojo::JSON: Denial of Service via unbounded recursion in JSON decoder	26 Oct 202619:14 UTC build	6 Jul 2026
GHSA-h7x6-9mqf-vgmx high	Global Avo.configuration.locale mutation via params[:set_locale] (process-wide state poisoning)	26 Oct 202619:14 UTC build
GHSA-vxc9-rm8f-p56j high	Ransack has a memory-exhaustion DoS via unbounded attribute position field in query params	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12261-1 high	git-bug-0.11.0-3.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12262-1 high	istioctl-1.31.3-1.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:12264-1 high	okteto-3.24.1-1.1 on GA media	26 Oct 202619:14 UTC build
openSUSE-SU-2026:22158-1 high	Security update for docker	26 Oct 202619:14 UTC build

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.