# CVEs published 2022-04-02

4 CVEs were published on April 2, 2022: 0 critical, 1 high. Days are UTC.

- [CVE-2022-28356](https://cve.now/CVE-2022-28356.md): In the Linux kernel before 5.17.1, a refcount leak bug was found in net/llc/af\_llc.c. (CVSS 5.5)
- [CVE-2022-28355](https://cve.now/CVE-2022-28355.md): randomUUID in Scala.js before 1.10.0 generates predictable values. (no CVSS)
- [CVE-2022-28352](https://cve.now/CVE-2022-28352.md): WeeChat (aka Wee Enhanced Environment for Chat) 3.2 to 3.4 before 3.4.1 does not properly verify the TLS certificate of the server, after ce (CVSS 4.3)
- [CVE-2022-1201](https://cve.now/CVE-2022-1201.md): NULL Pointer Dereference in mrb\_vm\_exec with super in mruby/mruby (CVSS 7.1, mruby/mruby)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2022-04-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.