Skip to content
OpenAdvisories

Archive

21 April 2026

Vulnerabilities first published on this day (UTC), newest first.

← March 2026 2026 / April /21 May 2026 →
  1. 1242
  2. 2258
  3. 3226
  4. 463
  5. 5111
  6. 6256
  7. 7280
  8. 8490
  9. 9279
  10. 10223
  11. 1139
  12. 1257
  13. 13223
  14. 14415
  15. 15194
  16. 16142
  17. 17166
  18. 1833
  19. 1925
  20. 20180
  21. 21352
  22. 22343
  23. 23184
  24. 24281
  25. 2540
  26. 2679
  27. 27198
  28. 28221
  29. 29136
  30. 30170
All Critical High Medium Low Exploited only Public exploit

167 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-39378

    nbconvert has an Arbitrary File Read via Path Traversal in HTMLExporter Image Embedding

    The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. In versions 6.5 through 7.17.0, when `HTMLExporter.embed_images=True`, nbconvert's markdown renderer allows arbitrary file read via path traversal …

    jupyter nbconvert kubeflow-pipelines-visualization-server nbconvert Debian Ubuntu Wolfi PyPI
  • Medium 6.5
    CVE-2026-39377

    nbconvert has an Arbitrary File Write via Path Traversal in Cell Attachment Filenames

    The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. Versions 6.5 through 7.17.0 allow arbitrary file writes to locations outside the intended output directory when processing notebooks containing cra…

    jupyter nbconvert kubeflow-pipelines-visualization-server nbconvert Debian Ubuntu Wolfi PyPI
  • Medium 5.3
    CVE-2026-29644

    XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) …

  • Medium 6.1
    CVE-2026-31013

    Dovestones Softwares ADPhonebook <4.0.1.1 has a reflected cross-site scripting (XSS) vulnerability in the search parame…

  • Medium 6.3
    CVE-2026-31014

    Dovestones Softwares AD Self Update <4.0.0.5 is vulnerable to Cross Site Request Forgery (CSRF). The affected endpoint …

  • Medium 6.5
    CVE-2026-30452

    Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authe…

  • Medium 6.9
    CVE-2026-41527

    KDE Kleopatra before 26.08.0 on Windows allows local users to obtain the privileges of a Kleopatra user, because there …

    KDE Kleopatra