OPENSUSE-SU-2026:10435-1 cpp-httplib-devel-0.38.0-1.1 on GA media

These are all security issues fixed in the cpp-httplib-devel-0.38.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10436-1 freeipmi-1.6.17-1.1 on GA media

These are all security issues fixed in the freeipmi-1.6.17-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-27079 WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusion.This issue affects Amfissa: from n/a through = 1.1...

python313-PyMuPDF-1.27.2.2-1.1 on GA media (moderate)

python313-PyMuPDF-1.27.2.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10416-1 Rating: moderate Cross-References: CVE-2026-3029 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

pgvector-devel-0.8.2-1.1 on GA media (moderate)

pgvector-devel-0.8.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10409-1 Rating: moderate Cross-References: CVE-2026-3172 CVSS scores: CVE-2026-3172 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now...

OPENSUSE-SU-2026:10432-1 golang-github-v2fly-v2ray-core-5.47.0-1.1 on GA media

These are all security issues fixed in the golang-github-v2fly-v2ray-core-5.47.0-1.1 package on the GA media of openSUSE Tumbleweed...

pnpm-10.32.1-1.1 on GA media (moderate)

pnpm-10.32.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10410-1 Rating: moderate Cross-References: CVE-2026-24842 CVSS scores: CVE-2026-24842 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-24842 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N...

PT-2026-27978

Name of the Vulnerable Software and Affected Versions Mikado-Themes Amfissa versions n/a through 1.1 Description A flaw exists in the handling of filenames for include/require statements within the PHP program of Mikado-Themes Amfissa. This issue, known as a 'PHP Remote File Inclusion',...

OPENSUSE-SU-2026:10423-1 nginx-1.29.7-1.1 on GA media

These are all security issues fixed in the nginx-1.29.7-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10426-1 python311-intake-2.0.9-1.1 on GA media

These are all security issues fixed in the python311-intake-2.0.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10418-1 python311-jsonpath-ng-1.8.0-1.1 on GA media

These are all security issues fixed in the python311-jsonpath-ng-1.8.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10419-1 rclone-1.73.3-1.1 on GA media

These are all security issues fixed in the rclone-1.73.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media

These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...

WordPress WPFAQBlock- FAQ & Accordion Plugin For Gutenberg plugin <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'class' Shortcode Attribute vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via 'class' Shortcode Attribute vulnerability discovered by theviper17y in WordPress Plugin WPFAQBlock versions = 1.1...

freeciv-3.2.4-1.1 on GA media (moderate)

freeciv-3.2.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10401-1 Rating: moderate Cross-References: CVE-2026-33250 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the freeciv-3.2.4-1.1...

OPENSUSE-SU-2026:10410-1 pnpm-10.32.1-1.1 on GA media

These are all security issues fixed in the pnpm-10.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10408-1 freerdp-3.24.1-1.1 on GA media

These are all security issues fixed in the freerdp-3.24.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10406-1 lemon-3.51.3-1.1 on GA media

These are all security issues fixed in the lemon-3.51.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10401-1 freeciv-3.2.4-1.1 on GA media

These are all security issues fixed in the freeciv-3.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2026-14005

The Post Flagger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'flag' shortcode in all versions up to, and including, 1.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...