Digest · Wednesday
Security digest: March 11, 2026
1 known exploited (cisa kev) addition and 2 critical advisories.
All digests · RSS · Markdown
Take stock
- Do you run any of these? n8n n8n. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-03-25.
- GitHub Actions: 1 critical advisory (
xygeni/xygeni-action). Check withgrep -rn 'uses: <owner>/<action>' .github/workflows. - Go: 1 critical advisory (
github.com/cosmos/evm). Check withgovulncheck ./.... - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 1
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2025-68613 | n8n n8n n8n Improper Control of Dynamically-Managed Code Resources Vulnerability | 2026-03-25 |
Critical advisories by ecosystem 2
GitHub-reviewed advisories rated critical, published this day (Pacific time).
GitHub Actions 1
Check: grep -rn 'uses: <owner>/<action>' .github/workflows
- xygeni-action v5 tag poisoned with C2 backdoor CVE-2026-31976 CVSS 9.3 Critical
xygeni/xygeni-action>= 5, < 6.4.0 → fixed in 6.4.0
Go 1
Check: govulncheck ./...
- Cosmos EVM: incorrect state handling during nested EVM execution paths GHSA-54gx-3cgr-7mfm CVSS 9.3 Critical
github.com/cosmos/evm< 0.6.0 → fixed in 0.6.0