@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50184 via @angular/service-worker (>=21.0.0, <=21.2.11)

@angular/service-worker NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50184 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359151...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50184 via @angular/service-worker (>=21.0.0, <=21.2.11)

@angular/service-worker NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=19.0.0, <=19.2.20)

@angular/service-worker NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50184 Source advisory: OSV:GHSA-95QP-CMMW-MGQV...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50184 via @angular/service-worker (>=19.0.0, <=19.2.20)

@angular/service-worker NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50184 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359151...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50184 via @angular/service-worker (>=20.0.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50184 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359151...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50169 via @angular/service-worker (>=20.0.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50169 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359086...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50169 via @angular/service-worker (>=21.0.0, <=21.2.11)

@angular/service-worker NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=19.0.0, <=19.2.20)

@angular/service-worker NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50169 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359086...

@eui/deps-base (>=19.0.0-next.1, <=19.3.17), @eui/deps-base-light (>=19.0.0-next.1, <=19.3.17) +2 more potentially affected by CVE-2026-50169 via @angular/service-worker (>=19.0.0, <=19.2.20)

@angular/service-worker NPM version =19.0.0, =19.0.0-next.1, =19.0.0-next.1, =0.30.0, =0.30.0, =0.30.1 Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...

@eui/deps-base-light-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32), @eui/deps-base-next (>=19.2.2-snapshot-1746816578592, <=21.0.0-alpha.32) potentially affected by CVE-2026-50169 via @angular/service-worker (>=20.0.0, <=20.3.17)

@angular/service-worker NPM version =20.0.0, =19.2.2-snapshot-1746816578592, =19.2.2-snapshot-1746816578592, =21.0.0-alpha.32 Source cves: CVE-2026-50169 Source advisory: OSV:GHSA-GV2Q-MQQV-365M...

@eui/deps-base (>=21.0.0-alpha.10, <=23.0.0-alpha.1), @eui/deps-base-light (>=21.0.0-alpha.10, <=23.0.0-alpha.1) potentially affected by CVE-2026-50169 via @angular/service-worker (>=21.0.0, <=21.2.11)

@angular/service-worker NPM version =21.0.0, =21.0.0-alpha.10, =21.0.0-alpha.10, =23.0.0-alpha.1 Source cves: CVE-2026-50169 Source advisory: SNYK:JS-ANGULARSERVICEWORKER-17359086...

PT-2026-49403

Unauthenticated Privilege Escalation in WP BASE Booking = 5.9.0 versions...

Oracle Linux 7 : gstreamer-plugins-base / and / gstreamer-plugins-good (ELSA-2026-7850)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7850 advisory. - Security update CVE-2026-2921 Orabug: 39201593 gstreamer-plugins-good Tenable has extracted the preceding description block directly from the Oracle...

gstreamer-plugins-base and gstreamer-plugins-good security update

gstreamer-plugins-base 0.10.36-10.0.1 - Security update CVE-2026-2921 Orabug: 39201593 gstreamer-plugins-good 0.10.31-13.0.1 - Security update for CVE-2026-3083 CVE-2026-3085 Orabug: 39199326...

Debian dla-4628 : linux-base - security update

The remote Debian 12 host has a package installed that is affected by a vulnerability as referenced in the dla-4628 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4628-1 [email protected] https://www.debian.org/lts/security/ B...

PT-2026-49271

A heap use-after-free in the gf node get tag function scenegraph/base scenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2026-39587: Incorrect Privilege Assignment

Unauthenticated Privilege Escalation in WP BASE Booking = 5.9.0 versions...

valkey security update

An update is available for valkey. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Valkey is an advanced key-value store. It is often referred to as a data...

CVE-2026-54394

MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields such as id, name, and uuid without ensuring that the resolved file remains inside the intended APP/files/img/orgs/...

EUVD-2026-36563

MISP contains a path traversal vulnerability in OrganisationsController::getOrgLogo. The vulnerable code builds organisation logo file paths using organisation-controlled fields such as id, name, and uuid without ensuring that the resolved file remains inside the intended APP/files/img/orgs/...