CVEs published in April 2026
6,215 vulnerabilities, 624 critical, 20 exploited.
- marked project markedMarked: OOM Denial of Service via Infinite Recursion in marked Tokenizer8.7 High
- openprinting cupsOpenPrinting CUPS: Heap out-of-bounds read in SNMP supply-level polling leaks stack memory to authenticated users4.3 Medium
- vimVim: Command injection via backtick expansion in tag filenames6.6 Medium
- g-research parquetsharpParquetSharp: Possible Stack Overflow When Reading a ParquetFile with Large Decimal Type Width5.3 Medium
- traefik, red hat openshift dev spaces 3.28 +1 moreTraefik: StripPrefixRegex auth bypass via Path/RawPath desync7.8 High
github.com/k8sgpt-ai/k8sgptGok8sGPT has Prompt Injection through its k8sGPT-Operator8.7 High- anthropic claude code, anthropics claude-code +1 moreClaude Code arbitrary code execution via git worktree commondir trust dialog bypass7.7 High
- traefik, red hat openshift dev spaces 3.28 +1 moreTraefik: Forwarded alias spoofing top pre-auth decision bypass7.8 High
- traefik, red hat openshift dev spaces 3.28 +1 moreTraefik: ForwardAuth trustForwardHeader=false allows spoofed X-Forwarded-Prefix to bypass auth7.8 High
github.com/woven-planet/go-zserioGogo-zserio has Unbounded Memory Allocation for All Platforms9.8 Critical- nds-association zserioZserio: Integer Overflow in BitStreamReader and Unbounded Memory Allocation in Deserialization7.5 High
- budibaseBudibase auth session cookies are set with httpOnly:false — any XSS can lead to full account takeover8.1 High
- kimaiKimai: Team API Missing Object-Level Authorization3.3 Low
- berriai litellm, red hat lightspeed core, ansible automation platform 2 +1 more +3 moreLiteLLM: SQL injection in Proxy API key verification9.3 Critical
- dgraphUnauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph9.8 Critical
- anyscale rayRay: Remote Code Execution via Parquet Arrow Extension Type Deserialization8.9 High
- aws ops wheelPrivilege Escalation via Self-Writable Cognito Custom Attribute in AWS Ops Wheel8.7 High
- avo-hq avoAvo: Broken Access Control: Unauthorized Execution of Arbitrary Action Classes Across Resources8.8 High
- aws ops wheelAuthentication Bypass via Missing JWT Signature Verification in AWS Ops Wheel9.3 Critical
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM: Server-Side Template Injection in /prompts/test endpoint8.6 High
- almirhodzic nova-toggle-5nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields6.5 Medium
- becheran gridGrid: Integer Overflow in Grid::expand_rows Leads to Safe-API Undefined Behavior6.2 Medium
- bridgehead software filestoreBridgeHead FileStore < 24A Apache Axis2 Default Credentials RCE9.3 Critical
- newapi new api, quantumnous new-api +1 moreNew API: Stripe Webhook Signature Bypass via Empty Secret Enables Unlimited Quota Fraud7.1 High
- dgraphDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field9.1 Critical
- dgraphDgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field9.1 Critical
- redwoodjs redwoodsdk, sdk +1 moreRedwoodSDK: Same-site CSRF in in server actions5.3 Medium
- harttle liquidjsLiquidJS is vulnerable to Denial of Service via circular block reference in layout7.5 High
- lemmynet lemmyLemmy: SSRF in /api/v3/post via Webmention dispatch6.3 Medium
- lemmynet lemmyLemmy: SSRF and internal image disclosure in post link metadata via unvalidated og:image6.5 Medium
- linux, linux kernel +1 morewifi: rt2x00usb: fix devres lifetime5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm_user: fix info leak in build_report()5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: rfkill: prevent unlimited numbers of rfkill events from being created5.5 Medium
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 moremptcp: fix slab-use-after-free in __inet_lookup_established9.8 Critical
- linux, linux kernel +1 moreseg6: separate dst_cache for input and output paths in seg6 lwtunnel9.8 Critical
- linux, linux kernel +1 moreInput: uinput - fix circular locking dependency with ff-core7.8 High
- linux, linux kernel +1 morebtrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenetfilter: nft_ct: fix use-after-free in timeout object destroy7.8 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morexfrm: clear trailing padding in build_polexpire()5.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +4 more +6 morexfrm: hold dev ref until after transport_finish NF_HOOK7.8 High
- linux, linux kernel +1 moretipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG7.5 High
- linux, linux kernel +1 morewifi: brcmsmac: Fix dma_free_coherent() size5.5 Medium
- linux, linux kernel +1 morenfc: pn533: allocate rx skb before consuming bytes5.5 Medium
- linux, linux kernel +1 morebatman-adv: reject oversized global TT response buffers9.8 Critical
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp (6es7518-4ax00-1ab0) +4 more +6 morenet: altera-tse: fix skb leak on DMA mapping error in tse_start_xmit()5.5 Medium
- linux, linux kernel +1 morebatman-adv: hold claim backbone gateways by reference9.8 Critical
- linux, linux kernel +1 moredrm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat7.8 High
- linux, linux kernel +1 morepmdomain: imx8mp-blk-ctrl: Keep the NOC_HDCP clock enabled5.5 Medium
- linux, linux kernel +1 moremm/vma: fix memory leak in __mmap_region()5.5 Medium
- linux, linux kernel +1 moremm/damon/sysfs: dealloc repeat_call_control if damon_call() fails5.5 Medium
- Show moreLoading…