| | CVE-2026-23902 |  Apache | high | 8.1 | 0.0%
| | Incorrect Authorization vulnerability in Apache DolphinScheduler allows authenticated users with sys… | Apr 24, 2026 | Apr 27, 2026 |
| | CVE-2026-21515 |  Microsoft | critical | 9.9 | 0.1%
| | Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized… | Apr 24, 2026 | Apr 28, 2026 |
| | CVE-2026-38743 | Apache | medium | 4.3 | 0.0%
| | The authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-… | Apr 24, 2026 | Apr 27, 2026 |
| | CVE-2026-40690 | Apache | medium | 4.3 | 0.1%
| | The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with … | Apr 24, 2026 | Apr 27, 2026 |
| | CVE-2026-41066 |  Red Hat | medium | 5.9 | 0.0%
| | A flaw was found in lxml, a library for processing XML and HTML in Python. A remote attacker can exp… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-40897 | Red Hat | high | 8.8 | 0.1%
| | A flaw was found in mathjs, an extensive math library for JavaScript and Node.js. This vulnerability… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41411 | Red Hat | medium | 7.3 | 0.1%
| | Vim is an open source, command line text editor. Prior to 9.2.0357, A command injection vulnerabilit… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41079 | Red Hat | low | 4.3 | 0.0%
| | A flaw was found in CUPS. A network-adjacent attacker can send a specially crafted Simple Network Ma… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41140 | Red Hat | high | 8.7 | 0.1%
| | A flaw was found in Poetry, a dependency manager for Python. This vulnerability allows a remote atta… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41680 | Red Hat | medium | 7.5 | 0.1%
| | A flaw was found in marked, a markdown parser and compiler. An unauthenticated attacker can exploit … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42033 | Red Hat | high | 7.4 | 0.0%
| ✓ Fix | A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42035 | Red Hat | medium | 7.4 | 0.0%
| ✓ Fix | A flaw was found in Axios, a software library for making network requests. A remote attacker can exp… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42044 | Red Hat | high | 7.4 | 0.1%
| ✓ Fix | A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollu… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42043 | Red Hat | high | 7.2 | 0.1%
| ✓ Fix | A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42041 | Red Hat | high | 8.2 | 0.1%
| ✓ Fix | A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "G… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42038 | Red Hat | medium | 6.8 | 0.1%
| | A flaw was found in Axios, a software library used for making web requests. This vulnerability allow… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42037 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in Axios, an HTTP client for Node.js. A remote attacker, by controlling the type pr… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42034 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in Axios. A remote attacker can exploit this vulnerability by sending oversized str… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42036 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in Axios. When 'responseType: 'stream'' is used, Axios returns the response stream … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42039 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-42042 | Red Hat | medium | 6.1 | 0.0%
| | A flaw was found in Axios, a promise-based HTTP client. A remote attacker can exploit this vulnerabi… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41907 | Red Hat | medium | 4.8 | 0.0%
| | A flaw was found in uuid. The library's versions v3, v5, and v6 do not adequately check the size of … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41415 | Red Hat | high | 7.5 | 0.1%
| | A flaw was found in PJSIP, a multimedia communication library. A remote attacker could exploit this … | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41425 | Red Hat | medium | 5.4 | 0.0%
| | A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remot… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41481 | Red Hat | high | 6.5 | 0.0%
| | A flaw was found in LangChain and langchain-text-splitters. This vulnerability, a Server-Side Reques… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-41488 | Red Hat | low | 3.4 | 0.0%
| | A flaw was found in langchain-openai. A remote attacker could exploit a Time-of-Check to Time-of-Use… | Apr 24, 2026 | Apr 24, 2026 |
| | CVE-2026-31680 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net: ipv6: flowlabel: defer excl… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31677 | Red Hat | low | 5.5 | 0.0%
| ✓ Fix | In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - limit RX SG ext… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31679 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
openvswitch: validate MPLS set/s… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31678 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
openvswitch: defer tunnel netdev… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31675 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_netem: fix out-of… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31685 | Red Hat | medium | 7.1 | 0.1%
| ✓ Fix | In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_eui64: reject in… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31674 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_rt: reject overs… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31684 | Red Hat | medium | 7.1 | 0.0%
| ✓ Fix | In the Linux kernel, the following vulnerability has been resolved:
net: sched: act_csum: validate n… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31683 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
batman-adv: avoid OGM aggregatio… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31676 | Red Hat | medium | 5.5 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
rxrpc: only handle RESPONSE duri… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31682 | Red Hat | medium | 5.5 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
bridge: br_nd_send: linearize sk… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31681 | Red Hat | medium | 6.1 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
netfilter: xt_multiport: validat… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-31673 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
af_unix: read UNIX_DIAG_VFS data… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-6951 | Red Hat | high | 8.8 | 0.2%
| | A flaw was found in simple-git. A remote attacker could exploit this vulnerability by providing spec… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-6993 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in go-kratos kratos. A remote attacker could exploit a vulnerability in the HTTP se… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-6994 | Red Hat | medium | 6.3 | 0.1%
| | A flaw was found in Envoy. A remote attacker could exploit a weakness in the Query Parameter Handler… | Apr 25, 2026 | Apr 25, 2026 |
| | CVE-2026-7020 | Red Hat | low | 5.6 | 0.1%
| | A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath o… | Apr 26, 2026 | Apr 26, 2026 |
| | CVE-2018-25282 | Red Hat | medium | 5.5 | 0.0%
| | Nmap 7.70 contains a denial of service vulnerability that allows local attackers to crash the applic… | Apr 26, 2026 | Apr 26, 2026 |
| | CVE-2026-31690 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
firmware: thead: Fix buffer over… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-31691 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel's igb network driver. When an AF_XDP zero-copy application term… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-31689 | Red Hat | medium | 5.5 | — | | A flaw was found in the EDAC/mc module of the Linux kernel. An error in the ordering of operations w… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-31686 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel. A double-free vulnerability exists in the Kernel Address Sanit… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-31687 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's OMAP General Purpose Input/Output (GPIO) driver. The omap_mpu… | Apr 27, 2026 | Apr 27, 2026 |
| | CVE-2026-31688 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's driver core. An inconsistency in enforcing the `device_lock` … | Apr 27, 2026 | Apr 27, 2026 |