CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
praisonaiagentsPyPIPraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint8.1 High- mervinpraison praisonaiPraisonAI - Arbitrary Shell Command Execution via Hardcoded Approval Mode Override8.7 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain4.8 Medium
- gitroom postiz, gitroomhq postiz-app +1 morePostiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream8.2 High
- emilstenstrom justhtmljusthtml before 1.15.0 Multiple Security Issues9.3 Critical
- chartbrewChartbrew Cross-Tenant Template Export and Secret Disclosure in `GET /team/:team_id/template/generate/:project_id`7.7 High
- chartbrewChartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs7.8 High
- tandoor recipesTandoor Recipes Affected by Denial of Service via Recipe Import6.5 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an XML External Entity (XXE) Injection5.3 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure6.5 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has Weak REST API Key Generation (Predictable)7.5 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has REST API PII Exposure via get_user_info_from_username6.5 Medium
- chamilo chamilo-lms, lms +1 moreWeak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms9.4 Critical
- chamilo lms, chamilo-lms +1 moreChamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has unauthenticated access to Twig template source files exposes application logic5.3 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API Tokens7.1 High
- python software foundation cpythonBase64 decoding stops at first padded quad by default6.0 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an Insecure Direct Object Reference (IDOR)7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS affected by unauthenticated RCE in main/install folder9.3 Critical
- chamilo lms, chamilo-lms +1 moreChamilo LMS Affected by Remote Code Execution via eval() in Platform Settings8.8 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an IDOR in REST API Stats Endpoint Exposes Any User's Learning Data6.5 Medium
- chamilo lms, chamilo-lms +1 moreOS Command Injection in Chamilo LMS 1.11.369.1 Critical
- python software foundation cpython, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0), simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ac0) +3 more +5 moreHTTP client proxy tunnel headers not validated for CR/LF5.7 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit4.7 Medium
- chamilo lms, chamilo-lms +1 moreChamilo LMS has Arbitrary File Upload via MIME-Only Validation in Exercise Sound Upload Leads to RCE7.5 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an IDOR in Gradebook Allows Cross-Course Evaluation Edit Without Ownership Check7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has an IDOR in Gradebook Allows Cross-Course Deletion of Any Student's Grade Result7.1 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has Reflected XSS via Unsanitized http_build_query() in Exercise Question List Pagination5.4 Medium
- chamilo lms, chamilo-lms +1 moreServer-Side Request Forgery (SSRF) in Chamilo LMS7.7 High
- chamilo lms, chamilo-lms +1 moreSession Fixation in Chamilo LMS7.5 High
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 moreOdh-dashboard: odh dashboard kubernetes service account exposure8.5 High
- chamilo lms, chamilo-lms +1 morePath Traversal (Arbitrary File Delete) in Chamilo LMS8.3 High
- chamilo lms, chamilo-lms +1 moreChamilo LMS has validation-less redirect on login page0.0 None
- saltcornSaltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory read8.2 High
- bugsinkBugsink affected by authenticated arbitrary file write in artifactbundle/assemble7.1 High
- rocket.chatAn open redirect vulnerability in Rocket.Chat versions prior to 8.4.0 allows users to be...5.3 Medium
- mervinpraison praisonaiagentsPraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback7.1 High
- mervinpraison praisonaiPraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution5.5 Medium
- mervinpraison praisonaiPraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai8.6 High
- mervinpraison praisonaiPraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`9.4 Critical
- mervinpraison praisonaiPraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading7.8 High
- fastgptFastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default5.3 Medium
- smallstep certificates, step-ca +1 moreStep CA affected by an index out of bounds panic in TPM attestation EKU validation3.7 Low
- svelte kitSvelteKit's invalidated redirect in handle hook causes Denial-of-Service6.3 Medium
- svelte kitSvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node8.2 High
- danielgatis rembgRembg has a Path Traversal via Custom Model Loading5.3 Medium
- systemdIn systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary...2.9 Low
- apache log4cxx, apache software foundation log4cxx (brew), log4cxx (conan) +2 moreApache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters6.3 Medium
- apache log4netApache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden characters6.3 Medium
- Show moreLoading…