CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- josdejong mathjs, red hat cryostat 4, developer hub +6 more +8 moreUnsafe array index getter in mathjs8.8 High
unheadnpmunhead: Streaming SSR `streamKey` injected into inline script without identifier validation2.3 LowrembgPyPIrembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration4.3 Medium- stigtsp net::cidr::lite, net\ +1 moreNet::CIDR::Lite versions before 0.23 for Perl mishandles IPv4 mapped IPv6 addresses, which may allow IP ACL bypass6.5 Medium
- stigtsp net::cidr::lite, net\ +1 moreNet::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability4.3 Medium
- microsoft edge, edge for android +1 moreMicrosoft Edge (Chromium-based) for Android Spoofing Vulnerability5.4 Medium
- paperclipai paperclip, paperclip paperclipai, paperclipai\/server +1 more +3 morePaperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass10.0 Critical
- rhukster dom-sanitizerrhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives4.7 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN has same HostGUID for all new installs6.9 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreDNN has Force Friend Request Acceptance4.3 Medium
- temporal technologies, inc. temporalMissing Authentication on Streaming gRPC Replication Endpoint6.3 Medium
- amannn next-intlnext-intl has an open redirect vulnerability6.9 Medium
- gramps-project gramps-web-apiGramps Web API has Zip Slip Path Traversal in Media Archive Import9.1 Critical
n8n-mcpnpmn8n-mcp has unauthenticated session termination and information disclosure in HTTP transport8.2 High- py-pdf pypdfpypdf: Manipulated XMP metadata entity declarations can exhaust RAM6.9 Medium
- fastgptBroken Access Control (IDOR) Leading to Cross-Tenant Application Access in FastGPT5.3 Medium
- dnnsoftware dotnetnuke, dnn.platform +1 moreDotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload8.1 High
- getarcane arcaneArcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint7.2 High
- phpseclibphpseclib has a variable-time HMAC comparison in SSH2::get_binary_packet() using != instead of hash_equals()3.7 Low
- craigjbass clearancekitClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path6.8 Medium
- patrickjuchli basic-ftpbasic-ftp allows a malicious FTP server to cause client-side denial of service via unbounded multiline control response buffering7.5 High
- geonodeGeoNode SSRF via Service Registration5.3 Medium
- geonodeGeoNode < 4.4.5, 5.0.2 SSRF via Document Upload5.3 Medium
- xrootdXRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern5.3 Medium
- lin-snow ech0Ech0 before 4.4.3 Stored XSS via SVG Upload4.8 Medium
- lin-snow ech0Ech0 before 4.4.3 SSRF via DNS Resolution Bypass5.1 Medium
- lin-snow ech0Ech0 before 4.4.3 Missing Authorization on System Logs5.3 Medium
- lin-snow ech0Ech0 before 4.4.3 Authentication Bypass via Comment Panel7.0 High
- lin-snow ech0Ech0 before 4.4.3 Scope Bypass via profile:read Token8.5 High
- langchain langsmith, langchain-ai langsmith-sdk +1 moreLangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`5.6 Medium
- goshsgoshs has a file-based ACL authorization bypass in goshs state-changing routes9.3 Critical
- goshsgoshs is Missing Write Protection for Parametric Data Values7.7 High
- opnsense coreREDAXO before 5.21.0 Reflected XSS via Packages API function Parameter2.1 Low
- opnsense coreREDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter2.1 Low
- mauriceboe trekMissing Authorization on Immich Trip Photo Routes in TREK7.1 High
- lin-snow ech0Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints7.1 High
- lin-snow ech0Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement7.2 High
- mauriceboe trekUnauthenticated Access to Uploaded Files in TREK3.7 Low
- astral-sh uvAstral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entries8.7 High
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions9.1 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI: Critical RCE via `type: job` workflow YAML9.8 Critical
- mervinpraison praisonai, praisonaiagents +1 morePraisonAI has RCE via Automatic tools.py Import8.4 High
- b3log siyuanSiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`8.5 High
- b3log siyuanSiYuan: Publish Reader Can Arbitrarily Delete Attribute View Files via removeUnusedAttributeView API8.1 High
- mervinpraison praisonaiPraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries7.2 High
- ajenti, ajenti plugin core +1 moreajenti.plugin.core has a race conditions in 2FA6.9 Medium
@saltcorn/datanpm@saltcorn/data vulnerable to SQL Injection via jsexprToSQL Literal Handler0.0 None- ajenti, ajenti plugin core +1 morePassword bypass when 2FA is activated9.3 Critical
- mervinpraison praisonaiPraisonAI - Tool Approval Cache Bypass via Coarse-Grained Caching6.8 Medium
- Show moreLoading…