---
title: "Security digest: March 26, 2026"
url: https://erroneo.us/security/2026-03-26/
description: "March 26, 2026 vulnerability digest: 1 CISA KEV addition (Aquasecurity); 12 critical advisories (PyPI, npm, Maven, Go…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-03-26
date_modified: 2026-03-26
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: March 26, 2026

1 known exploited (cisa kev) addition and 12 critical advisories.

## Take stock

- Do you run any of these? Aquasecurity Trivy. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-04-09.
- npm: 4 critical advisories ( n8n , openclaw , convict ). Check with npm audit (or: npm ls <package>) .
- Maven: 3 critical advisories ( com.splunk:splunk-otel-javaagent , org.springframework.ai:spring-ai-vector-store , com.datadoghq:dd-java-agent ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- Go: 3 critical advisories ( github.com/openbao/openbao , code.vikunja.io/api ). Check with govulncheck ./... .
- PyPI: 1 critical advisory ( langflow ). Check with pip-audit (or: pip show <package>) .
- Composer (PHP): 1 critical advisory ( wwbn/avideo ). Check with composer audit .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

- [CVE-2026-33634](https://erroneo.us/security/cve/CVE-2026-33634/index.md) Aquasecurity Trivy: Aquasecurity Trivy Embedded Malicious Code Vulnerability (CISA due 2026-04-09)

## Critical advisories

- [CVE-2026-33873](https://erroneo.us/security/cve/CVE-2026-33873/index.md) Langflow has Authenticated Code Execution in Agentic Assistant Validation — PyPI langflow <= 1.8.1 → 1.9.0
- [CVE-2026-33696](https://erroneo.us/security/cve/CVE-2026-33696/index.md) n8n: Prototype Pollution in XML and GSuiteAdmin node parameters lead to RCE — npm n8n = 2.14.0 → 2.14.1; npm n8n >= 2.0.0-rc.0, < 2.13.3 → 2.13.3; npm n8n < 1.123.27 → 1.123.27
- [CVE-2026-35639](https://erroneo.us/security/cve/CVE-2026-35639/index.md) OpenClaw Gateway: RCE and Privilege Escalation from operator.pairing to operator.admin via device.pair.approve — npm openclaw < 2026.3.22 → 2026.3.22
- [CVE-2026-33863](https://erroneo.us/security/cve/CVE-2026-33863/index.md) Convict has prototype pollution via load(), loadFile(), and schema initialization — npm convict <= 6.2.4 → 6.2.5
- [GHSA-h8w2-rv57-vc6f](https://erroneo.us/security/ghsa/GHSA-h8w2-rv57-vc6f/index.md) splunk-otel-javaagent: Unsafe deserialization in RMI instrumentation may lead to Remote Code Execution — Maven com.splunk:splunk-otel-javaagent < 2.26.1 → 2.26.1
- [CVE-2026-22738](https://erroneo.us/security/cve/CVE-2026-22738/index.md) Spring AI: SpEL injection is triggered when a user-supplied value is used as a filter expression key — Maven org.springframework.ai:spring-ai-vector-store >= 1.0.0, < 1.0.5 → 1.0.5; Maven org.springframework.ai:spring-ai-vector-store >= 1.1.0-M1, < 1.1.4 → 1.1.4
- [CVE-2026-33758](https://erroneo.us/security/cve/CVE-2026-33758/index.md) OpenBao has Reflected XSS in its OIDC authentication error message — Go github.com/openbao/openbao < 0.0.0-20260325133417-6e2b2dd84f0e → 0.0.0-20260325133417-6e2b2dd84f0e
- [CVE-2026-33757](https://erroneo.us/security/cve/CVE-2026-33757/index.md) OpenBao lacks user confirmation for OIDC direct callback mode — Go github.com/openbao/openbao < 0.0.0-20260325142553-e32103951925 → 0.0.0-20260325142553-e32103951925
- [CVE-2026-33728](https://erroneo.us/security/cve/CVE-2026-33728/index.md) dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution — Maven com.datadoghq:dd-java-agent >= 0.40.0, < 1.60.3 → 1.60.3
- [CVE-2026-33864](https://erroneo.us/security/cve/CVE-2026-33864/index.md) Convict has Prototype Pollution via startsWith() function — npm convict <= 6.2.4 → 6.2.5
- [CVE-2026-33867](https://erroneo.us/security/cve/CVE-2026-33867/index.md) AVideo has Plaintext Video Password Storage — Composer (PHP) wwbn/avideo <= 26.0 → no fix
- [GHSA-2pv8-4c52-mf8j](https://erroneo.us/security/ghsa/GHSA-2pv8-4c52-mf8j/index.md) Vikunja: Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR — Go code.vikunja.io/api <= 2.2.0 → 2.2.1

---
Source page: https://erroneo.us/security/2026-03-26/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt