Skip to content
OpenAdvisories

Archive

6 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /6 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2026-35045 Public exploit

    Tandoor Recipes Affected by Private Recipe Exposure and Unauthorized Modification

    Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. Prior to 2.6.4, the PUT /api/recipe/batch_update/ endpoint in Tandoor Recipes allows any authenticated user within a Space to modify any recipe in that Space,…

    Tandoor Recipes recipes
  • High 7.2
    CVE-2026-35037 Public exploit Scanner template

    Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata

    Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/title endpoint accepts an arbitrary URL via the website_url query parameter and makes a server-side HTTP request to it without any validati…

    lin-snow Ech0 github.com/lin-snow/Ech0 Go
  • High 8.7
    CVE-2026-35029 Public exploit Scanner template EPSS 39%

    LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to m…

    BerriAI litellm airflow-3 litellm Wolfi PyPI
  • High 8.5
    CVE-2026-34975 Public exploit

    Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

    Plunk is an open-source email platform built on top of AWS SES. Prior to 0.8.0, a CRLF header injection vulnerability was discovered in SESService.ts, where user-supplied values for from.name, subject, custom header keys/values, and attachment filenames were …

    useplunk plunk
  • High 8.7
    CVE-2026-34940 Public exploit

    KubeAI has an OS Command Injection via Model URL in Ollama Engine startup probe allows arbitrary command execution in model pods

    KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam…

    kubeai-project kubeai github.com/kubeai-project/kubeai Go
  • High 7.9
    CVE-2026-34444 Public exploit

    Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

    Lupa integrates the runtimes of Lua or LuaJIT2 into CPython. In 2.6 and earlier, attribute_filter is not consistently applied when attributes are accessed through built-in functions like getattr and setattr. This allows an attacker to bypass the intended rest…

    scoder lupa lupa python-lupa Debian Ubuntu PyPI
  • High 8.6
    CVE-2026-33752 Public exploit

    Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)

    curl_cffi is the a Python binding for curl. Prior to 0.15.0, curl_cffi does not restrict requests to internal IP ranges, and follows redirects automatically via the underlying libcurl. Because of this, an attacker-controlled URL can redirect requests to inter…

    lexiforest curl_cffi curl-cffi PyPI