openSUSE 16 Security Update : gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer (openSUSE-SU-2026:20329-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20329-1 advisory. Changes in gstreamer-rtsp-server: - Update to version 1.26.7: - Fix issues with GDISABLECHECKS & GDISABLEASSERT. - rtsp-server: tests: Switch to fixture...

@snyk/snyk-cocoapods-plugin (>=2.6.0, <=3.1.1), @snyk/snyk-hex-plugin (>=2.0.0, <=2.2.2) +4 more potentially affected by CVE-2026-30916 via shescape (>=2.1.0, <=2.1.6)

shescape NPM version =2.1.0, =2.6.0, =2.0.0, =8.0.0, =3.0.0, =3.0.0, =3.1.2 Source cves: CVE-2026-30916 Source advisory: SNYK:JS-SHESCAPE-15440479...

Security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer (moderate)

openSUSE security update: security update for gstreamer-rtsp-server, gstreamer-plugins-ugly, gstreamer-plugins-rs, gstreamer-plugins-libav, gstreamer-plugins-good, gstreamer-plugins-base, gstreamer-plugins-bad, gstreamer-docs, gstreamer-devtools, gstreamer...

CVE-2026-2599

The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via deserialization of untrusted input in the 'downloadcsv' function. This makes it possible for unauthenticated attackers to inject a P...

GHSA-P436-GJF2-799P vulnerabilities

Vulnerabilities for packages: trufflehog, harbor-scanner-trivy-fips, reports-server, neuvector-sigstore-interface-fips, rancher-fleet, lazydocker, rancher-system-agent, vexctl, trufflehog-fips, k3s, zot, cosign-fips, knative-serving, google-osconfig-agent, tekton-pipelines, rancher-fleet-fips,...

EUVD-2026-10030

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a through 5.3.80...

CVE-2026-28106

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in Kings Plugins B2BKing Premium allows Phishing.This issue affects B2BKing Premium: from n/a before 5.4.20...

Arbitrary Code Execution

Claude Code is vulnerable to Arbitrary Code Execution. The vulnerability is due to Yarn plugin execution occurring before the startup trust dialog when running in a project using Yarn 3.0 or above, allowing malicious project plugins to execute code if a user launches Claude Code in an untrusted...

CVE-2026-27396

Missing Authorization vulnerability in e-plugins Directory Pro directory-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Directory Pro: from n/a through = 2.5.6...

CVE-2026-27359

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

PT-2026-23672

Name of the Vulnerable Software and Affected Versions Kings Plugins B2BKing Premium versions through 5.3.80 Description An issue exists in Kings Plugins B2BKing Premium that allows for URL redirection to an untrusted site, potentially enabling phishing attacks. The issue is an 'Open Redirect' whi...

Docker Desktop Docker Plugins Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the...

com.github.vzakharchenko:keycloak-plugins (1.0.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.0.2) +12 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (8.0.2)

org.keycloak:keycloak-services MAVEN version 8.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.0.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:keycloak-plugins (>=1.1.0, <=1.2.0), com.github.vzakharchenko:mikrotik-radius-plugin (>=1.1.0, <=1.2.0) +12 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (9.0.0)

org.keycloak:keycloak-services MAVEN version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 -...

com.github.vzakharchenko:keycloak-plugins (1.2.2), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.2) +13 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (9.0.2)

org.keycloak:keycloak-services MAVEN version 9.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.2 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.github.vzakharchenko:keycloak-plugins (1.2.3), com.github.vzakharchenko:mikrotik-radius-plugin (1.2.3) +14 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (9.0.3)

org.keycloak:keycloak-services MAVEN version 9.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:keycloak-plugins 1.2.3 - com.github.vzakharchenko:mikrotik-radius-plugin...

com.charlyghislain.keycloak:keycloak-importexport (12.0.0), com.github.vzakharchenko:chillispot-radius-plugin (1.3.5) +26 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (12.0.4)

org.keycloak:keycloak-services MAVEN version 12.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.charlyghislain.keycloak:keycloak-importexport 12.0.0 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.6), com.github.vzakharchenko:cisco-radius-plugin (1.3.6) +27 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (13.0.0)

org.keycloak:keycloak-services MAVEN version 13.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.6 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.3.15), com.github.vzakharchenko:cisco-radius-plugin (1.3.15) +24 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (15.1.0)

org.keycloak:keycloak-services MAVEN version 15.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.3.15 -...

com.github.vzakharchenko:chillispot-radius-plugin (1.4.4), com.github.vzakharchenko:cisco-radius-plugin (1.4.4) +34 more potentially affected by CVE-2026-3009 via org.keycloak:keycloak-services (18.0.0)

org.keycloak:keycloak-services MAVEN version 18.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - com.github.vzakharchenko:chillispot-radius-plugin 1.4.4 -...