Skip to content
OpenAdvisories

Archive

5 April 2026

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.2
    CVE-2019-25677 Public exploit

    WinRAR 5.61 Denial of Service via Malformed Language File

    WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation directory. Attackers can trigger the crash by opening an archive and pressing the t…

  • Medium 6.3
    CVE-2026-5556 Public exploit

    badlogic pi-mono loader.ts discoverAndLoadExtensions code injection

    A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote ex…

  • Medium 6.3
    CVE-2026-5530 Public exploit

    Ollama Model Pull API download.go server-side request forgery

    A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The…