OPENSUSE-SU-2026:10529-1 tekton-cli-0.44.1-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.44.1-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-40157: Improper Limitation of a Pathname to a Restricted Directory

PraisonAI is a multi-agent teams system. Prior to 4.5.128, cmdunpack in the recipe CLI extracts .praison tar archives using raw tar.extract without validating archive member paths. A .praison bundle containing ../../ entries will write files outside the intended output directory. An attacker who...

PT-2026-31970

OpenClaw before 2026.3.22 contains a service discovery vulnerability where TXT metadata from Bonjour and DNS-SD could influence CLI routing even when actual service resolution failed. Attackers can exploit unresolved hints to steer routing decisions to unintended targets by providing malicious...

CVE-2026-33791

An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system. Certain 'set...

CVE-2026-33791 Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root

An OS Command Injection vulnerability in the CLI processing of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker executing specific, crafted CLI commands to inject arbitrary shell commands as root, leading to a complete compromise of the system. Certain 'set...

CVE-2026-33776

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. A local user with low privileges can execute the CLI command 'show mgd' with specific arguments which will expose sensitive...

CVE-2026-33776 Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS and Junos OS Evolved allows a local user with low privileges to read sensitive information. A local user with low privileges can execute the CLI command 'show mgd' with specific arguments which will expose sensitive...

CVE-2026-21915 JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

wasm-cli-runner (>=0.0.1, <=1.0.0) potentially affected by CVE-2026-34983 via wasmtime (3.0.0)

wasmtime PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - wasm-cli-runner =0.0.1, =1.0.0 Source cves: CVE-2026-34983 Source advisory: OSV:PYSEC-2026-151...

Wordfence Intelligence Weekly WordPress Vulnerability Report (March 30, 2026 to April 5, 2026)

Last week, there were 56 vulnerabilities disclosed in 50 WordPress Plugins that have been added to the Wordfence Intelligence Vulnerability Database, and there were 38 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, kubernetes-csi-external-provisioner, spicedb, hydra, gogatekeeper, crossplane-provider-azure-storage, crossplane-provider-aws-lambda, emissary, kube-metrics-adapter, kyverno, azure-service-operator, k6, headlamp, opencost, task, gitlab-runner,...

CVE-2026-39407 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

CVE-2026-39409 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

CVE-2026-39406 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard-fips, wazuh-dashboard, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

CVE-2026-39410 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

GHSA-26PP-8WGV-HJVM vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

GHSA-R5RP-J6WH-RVV4 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

GHSA-XF4J-XP2R-RQQX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

GHSA-XPCF-PG52-R92G vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, librechat, kibana, opensearch-dashboards, langfuse-fips, gemini-cli...

CLEANSTART-2026-CO68219 Docker CLI for Windows searches for plugin binaries in C:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ProgramData\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\Docker\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\cli-plugins, a directory that does not exist by default

Multiple security vulnerabilities affect the istio-fips package. Docker CLI for Windows searches for plugin binaries in...