org.apache.camel.component.linkedin:camel-linkedin (>=2.15.3, <=2.15.6), org.apache.camel.component.linkedin:camel-linkedin-api (>=2.15.3, <=2.15.6) +5 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.6)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin =2.15.3, =2.15.3, =2.15.6 -...

org.apache.camel.component.linkedin:camel-linkedin (>=2.14.3, <=2.14.4), org.apache.camel.component.linkedin:camel-linkedin-api (>=2.14.3, <=2.14.4) +5 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.5)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin =2.14.3, =2.14.3, =2.14.4 -...

org.apache.camel.maven:camel-servicenow-maven-plugin (2.20.0), org.apache.camel:camel-linkedin (2.20.0) +9 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.2.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin 2.20.0 -...

org.apache.camel.component.linkedin:camel-linkedin (>=2.14.3, <=2.14.4), org.apache.camel.component.linkedin:camel-linkedin-api (>=2.14.3, <=2.14.4) +5 more potentially affected by CVE-2026-50628 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.5)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin =2.14.3, =2.14.3, =2.14.4 -...

org.apache.camel.component.linkedin:camel-linkedin (2.14.1), org.apache.camel.component.linkedin:camel-linkedin-api (2.14.1) +5 more potentially affected by CVE-2026-50629 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin 2.14.1 -...

org.apache.camel:camel-linkedin (>=2.16.5, <=2.18.2), org.apache.camel:camel-linkedin-api (>=2.16.5, <=2.18.2) +8 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.9)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel:camel-linkedin =2.16.5, =2.16.5, =2.18.2 -...

org.apache.camel.component.linkedin:camel-linkedin (>=2.14.2, <=2.15.2), org.apache.camel.component.linkedin:camel-linkedin-api (>=2.14.2, <=2.15.2) +5 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.4)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin =2.14.2, =2.14.2, =2.15.2 -...

org.apache.camel.component.linkedin:camel-linkedin (2.14.1), org.apache.camel.component.linkedin:camel-linkedin-api (2.14.1) +5 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.0.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.component.linkedin:camel-linkedin 2.14.1 -...

CVE-2026-33319

WWBN AVideo is an open source video platform. Prior to version 26.0, the "uploadVideoToLinkedIn" method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via "escapeshellarg". If an...

WWBN AVideo Operating System Command Injection Vulnerability

WWBN AVideo is a video platform building system developed by the WWBN team using PHP. Versions of WWBN AVideo prior to 26.0 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the uploadVideoToLinkedIn method in the SocialMediaPublisher plugin,...

CVE-2026-33319: Improper Neutralization of Special Elements used in an OS Command

WWBN AVideo is an open source video platform. Prior to version 26.0, the uploadVideoToLinkedIn method in the SocialMediaPublisher plugin constructs a shell command by directly interpolating an upload URL received from LinkedIn's API response, without sanitization via escapeshellarg. If an attacke...