---
title: "Security digest: March 25, 2026"
url: https://erroneo.us/security/2026-03-25/
description: "March 25, 2026 vulnerability digest: 1 CISA KEV addition (Langflow); 10 critical advisories (Maven, Go, npm, Composer…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-03-25
date_modified: 2026-03-25
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: March 25, 2026

1 known exploited (cisa kev) addition and 10 critical advisories.

## Take stock

- Do you run any of these? Langflow Langflow. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-04-08.
- npm: 5 critical advisories ( pdf-image , thumbler , textract , node-tesseract-ocr , n8n ). Check with npm audit (or: npm ls <package>) .
- Go: 2 critical advisories ( github.com/siyuan-note/siyuan/kernel ). Check with govulncheck ./... .
- Maven: 1 critical advisory ( io.opentelemetry.javaagent:opentelemetry-javaagent ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- Composer (PHP): 1 critical advisory ( wwbn/avideo ). Check with composer audit .
- PyPI: 1 critical advisory ( litellm ). Check with pip-audit (or: pip show <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2026-33017](https://erroneo.us/security/cve/CVE-2026-33017/index.md) Langflow Langflow: Langflow Code Injection Vulnerability (CISA due 2026-04-08)

## Critical advisories

- [CVE-2026-33701](https://erroneo.us/security/cve/CVE-2026-33701/index.md) OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution — Maven io.opentelemetry.javaagent:opentelemetry-javaagent < 2.26.1 → 2.26.1
- [CVE-2026-33670](https://erroneo.us/security/cve/CVE-2026-33670/index.md) SiYuan has directory traversal within its publishing service — Go github.com/siyuan-note/siyuan/kernel <= 0.0.0-20260317012524-fe4523fff2c8 → no fix
- [CVE-2026-26830](https://erroneo.us/security/cve/CVE-2026-26830/index.md) pdf-image has an OS Command Injection Vulnerability through its pdfFilePath parameter — npm pdf-image <= 2.0.0 → no fix
- [CVE-2026-26833](https://erroneo.us/security/cve/CVE-2026-26833/index.md) thumbler allows OS Command Injection — npm thumbler <= 1.1.2 → no fix
- [CVE-2026-26831](https://erroneo.us/security/cve/CVE-2026-26831/index.md) textract is vulnerable to OS Command Injection — npm textract <= 2.5.0 → no fix
- [CVE-2026-33716](https://erroneo.us/security/cve/CVE-2026-33716/index.md) AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php — Composer (PHP) wwbn/avideo <= 26.0 → no fix
- [CVE-2026-26832](https://erroneo.us/security/cve/CVE-2026-26832/index.md) node-tesseract-ocr is vulnerable to OS Command Injection through unsanitized recognize() function parameter — npm node-tesseract-ocr <= 2.2.1 → no fix
- [GHSA-5mg7-485q-xm76](https://erroneo.us/security/ghsa/GHSA-5mg7-485q-xm76/index.md) Two LiteLLM versions published containing credential harvesting malware — PyPI litellm >= 1.82.7, <= 1.82.8 → no fix
- [CVE-2026-33660](https://erroneo.us/security/cve/CVE-2026-33660/index.md) n8n has Multiple Remote Code Execution Vulnerabilities in Merge Node AlaSQL SQL Mode — npm n8n = 2.14.0 → 2.14.1; npm n8n >= 2.0.0-rc.0, < 2.13.3 → 2.13.3; npm n8n < 1.123.27 → 1.123.27
- [CVE-2026-33669](https://erroneo.us/security/cve/CVE-2026-33669/index.md) SiYuan has Arbitrary Document Reading within the Publishing Service — Go github.com/siyuan-note/siyuan/kernel <= 0.0.0-20260317012524-fe4523fff2c8 → no fix; Go github.com/siyuan-note/siyuan/kernel > 0 → no fix

---
Source page: https://erroneo.us/security/2026-03-25/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt