erroneo.us
Search all guides⌘K

Digest · Monday

Security digest: March 2, 2026

9 critical advisories.

All digests · RSS · Markdown

Take stock

  • npm: 5 critical advisories (@builder.io/qwik, @orpc/client, openclaw). Check with npm audit (or: npm ls <package>).
  • Composer (PHP): 3 critical advisories (wwbn/avideo, idno/known). Check with composer audit.
  • crates.io (Rust): 1 critical advisory (tracing-check). Check with cargo audit.
  • None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Known exploited (CISA KEV) 0

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

Critical advisories by ecosystem 9

GitHub-reviewed advisories rated critical, published this day (Pacific time).

npm 5

Check: npm audit (or: npm ls <package>)

Composer (PHP) 3

Check: composer audit

crates.io (Rust) 1

Check: cargo audit