Digest · Thursday
Security digest: March 26, 2026
1 known exploited (cisa kev) addition and 12 critical advisories.
All digests · RSS · Markdown
Take stock
- Do you run any of these? Aquasecurity Trivy. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-04-09.
- npm: 4 critical advisories (
n8n,openclaw,convict). Check withnpm audit (or: npm ls <package>). - Maven: 3 critical advisories (
com.splunk:splunk-otel-javaagent,org.springframework.ai:spring-ai-vector-store,com.datadoghq:dd-java-agent). Check withmvn dependency:tree -Dincludes=<groupId>:<artifactId>. - Go: 3 critical advisories (
github.com/openbao/openbao,code.vikunja.io/api). Check withgovulncheck ./.... - PyPI: 1 critical advisory (
langflow). Check withpip-audit (or: pip show <package>). - Composer (PHP): 1 critical advisory (
wwbn/avideo). Check withcomposer audit. - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.
Known exploited (CISA KEV) 1
Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.
| CVE | Product and flaw | CISA due |
|---|---|---|
| CVE-2026-33634 | Aquasecurity Trivy Aquasecurity Trivy Embedded Malicious Code Vulnerability | 2026-04-09 |
Critical advisories by ecosystem 12
GitHub-reviewed advisories rated critical, published this day (Pacific time).
npm 4
Check: npm audit (or: npm ls <package>)
- n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE CVE-2026-33696 CVSS 9.4 Critical
n8n= 2.14.0 → fixed in 2.14.1;n8n>= 2.0.0-rc.0, < 2.13.3 → fixed in 2.13.3;n8n< 1.123.27 → fixed in 1.123.27 - OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve CVE-2026-35639 CVSS 9.4 Critical
openclaw< 2026.3.22 → fixed in 2026.3.22 - Convict has prototype pollution via load(), loadFile(), and schema initialization CVE-2026-33863 CVSS 9.4 Critical
convict<= 6.2.4 → fixed in 6.2.5 - Convict has Prototype Pollution via startsWith() function CVE-2026-33864 CVSS 9.4 Critical
convict<= 6.2.4 → fixed in 6.2.5
Go 3
Check: govulncheck ./...
- OpenBao has Reflected XSS in its OIDC authentication error message CVE-2026-33758 CVSS 9.4 Critical
github.com/openbao/openbao< 0.0.0-20260325133417-6e2b2dd84f0e → fixed in 0.0.0-20260325133417-6e2b2dd84f0e - OpenBao lacks user confirmation for OIDC direct callback mode CVE-2026-33757 CVSS 9.6 Critical
github.com/openbao/openbao< 0.0.0-20260325142553-e32103951925 → fixed in 0.0.0-20260325142553-e32103951925 - Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR GHSA-2pv8-4c52-mf8j CVSS 9.1 Critical
code.vikunja.io/api<= 2.2.0 → fixed in 2.2.1
Maven 3
Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>
- splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution GHSA-h8w2-rv57-vc6f CVSS 9.3 Critical
com.splunk:splunk-otel-javaagent< 2.26.1 → fixed in 2.26.1 - Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key CVE-2026-22738 CVSS 9.8 Critical
org.springframework.ai:spring-ai-vector-store>= 1.0.0, < 1.0.5 → fixed in 1.0.5;org.springframework.ai:spring-ai-vector-store>= 1.1.0-M1, < 1.1.4 → fixed in 1.1.4 - dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution CVE-2026-33728 CVSS 9.3 Critical
com.datadoghq:dd-java-agent>= 0.40.0, < 1.60.3 → fixed in 1.60.3
Composer (PHP) 1
Check: composer audit
- AVideo has Plaintext Video Password Storage CVE-2026-33867 CVSS 9.1 Critical
wwbn/avideo<= 26.0 → no fix listed
PyPI 1
Check: pip-audit (or: pip show <package>)
- Langflow has Authenticated Code Execution in Agentic Assistant Validation CVE-2026-33873 CVSS 9.3 Critical
langflow<= 1.8.1 → fixed in 1.9.0