| | CVE-2026-31933 |  Red Hat | high | 7.5 | — | | A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention Syste… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-31934 | Red Hat | high | 7.5 | — | | A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention Syste… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-5342 | Red Hat | medium | 5.3 | — | | A flaw was found in LibRaw. A remote attacker could exploit this vulnerability by manipulating the `… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-31935 | Red Hat | high | 7.5 | — | | A flaw was found in Suricata. A remote attacker can exploit this vulnerability by sending a flood of… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-31937 | Red Hat | high | 7.5 | — | | A flaw was found in Suricata, a network intrusion detection, prevention, and security monitoring eng… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-32871 | Red Hat | high | 8.5 | 0.1%
| | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the OpenAPIProvi… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-35385 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contr… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34230 | Red Hat | medium | 5.3 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Util… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-26961 | Red Hat | low | 3.7 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Mult… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34831 | Red Hat | medium | 4.8 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::File… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34763 | Red Hat | medium | 5.3 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Dire… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34785 | Red Hat | high | 7.5 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Stat… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-35386 | Red Hat | low | 3.6 | 0.0%
| ✓ Fix | In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a … | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34786 | Red Hat | medium | 6.5 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Stat… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34826 | Red Hat | medium | 5.3 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Util… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34829 | Red Hat | high | 7.5 | 0.1%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Mult… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34830 | Red Hat | medium | 5.9 | 0.0%
| | Rack is a modular Ruby web server interface. Prior to versions 2.2.23, 3.1.21, and 3.2.6, Rack::Send… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-35387 | Red Hat | low | 3.1 | 0.1%
| ✓ Fix | OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcc… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-35388 | Red Hat | low | 2.2 | 0.0%
| ✓ Fix | OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-32762 | Red Hat | medium | 4.8 | 0.0%
| | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21 and 3.2.0 to… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34827 | Red Hat | high | 7.5 | 0.0%
| | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 t… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-35414 | Red Hat | medium | 4.8 | 0.0%
| ✓ Fix | OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34835 | Red Hat | medium | 4.8 | 0.2%
| | Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 t… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-26962 | Red Hat | medium | 4.8 | 0.0%
| | Rack is a modular Ruby web server interface. From version 3.2.0 to before version 3.2.6, Rack::Multi… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2025-58136 |  Apache | high | 7.5 | 0.7%
| | A bug in POST request handling causes a crash under a certain condition.
This issue affects Apache … | Apr 2, 2026 | Jul 24, 2026 |
| | CVE-2025-65114 | Apache | high | 7.5 | 0.4%
| | Apache Traffic Server allows request smuggling if chunked messages are malformed.
This issue affec… | Apr 2, 2026 | Jul 24, 2026 |
| | CVE-2026-34591 | Red Hat | medium | 6.5 | 0.0%
| | Poetry is a dependency manager for Python. From version 1.4.0 to before version 2.3.3, a crafted whe… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34601 | Red Hat | high | 7.5 | 0.0%
| | xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34742 | Red Hat | high | 8.0 | — | | A flaw was found in the Model Context Protocol (MCP) Go SDK. When an HTTP-based MCP server is run on… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34743 | Red Hat | medium | 5.3 | 0.1%
| ✓ Fix | XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to versio… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-34760 | Red Hat | medium | 5.9 | 0.1%
| | vLLM is an inference and serving engine for large language models (LLMs). From version 0.5.5 to befo… | Apr 2, 2026 | Apr 2, 2026 |
| | CVE-2026-23444 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: always free skb … | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31400 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
sunrpc: fix cache_request leak i… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31403 | Red Hat | medium | 7.0 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
NFSD: Hold net reference for the… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23435 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
perf/x86: Move event pointer set… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31395 | Red Hat | high | 7.0 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: fix OOB access in DBG_B… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31399 | Red Hat | medium | 4.7 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
nvdimm/bus: Fix potential use af… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23446 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net: usb: aqc111: Do not perform… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23432 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix use-after-free in mshv… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23449 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net/sched: teql: Fix double-free… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23466 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Open-code GGTT MMIO acce… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23437 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net: shaper: protect late read a… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31396 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net: macb: fix use-after-free ac… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23428 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free of sha… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23459 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
ip_tunnel: adapt iptunnel_xmit_s… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23472 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
serial: core: fix infinite loop … | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31404 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
NFSD: Defer sub-object cleanup i… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-31389 | Red Hat | medium | 4.7 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
spi: fix use-after-free on contr… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23448 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net: usb: cdc_ncm: add ndpoffset… | Apr 3, 2026 | Apr 3, 2026 |
| | CVE-2026-23440 | Red Hat | medium | 4.7 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix race condition du… | Apr 3, 2026 | Apr 3, 2026 |