--- title: "Security digest: April 10, 2026" url: https://erroneo.us/security/2026-04-10/ description: "April 10, 2026 vulnerability digest: 18 critical advisories (crates.io (Rust), Go, PyPI…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-04-10 date_modified: 2026-04-10 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: April 10, 2026 18 critical advisories. ## Take stock - PyPI: 9 critical advisories ( praisonaiagents , PraisonAI , gramps-webapi , aws-mcp , lollms , ajenti.plugin.core ). Check with pip-audit (or: pip show ) . - Go: 6 critical advisories ( github.com/patrickhener/goshs , github.com/juju/juju , github.com/canonical/lxd , github.com/daptin/daptin ). Check with govulncheck ./... . - crates.io (Rust): 2 critical advisories ( wasmtime , nimiq-blockchain ). Check with cargo audit . - npm: 1 critical advisory ( paperclipai , @paperclipai/server ). Check with npm audit (or: npm ls ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2026-34987](https://erroneo.us/security/cve/CVE-2026-34987/index.md) Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access — crates.io (Rust) wasmtime >= 25.0.0, < 36.0.7 → 36.0.7; crates.io (Rust) wasmtime >= 37.0.0, < 42.0.2 → 42.0.2; crates.io (Rust) wasmtime = 43.0.0 → 43.0.1 - [CVE-2026-40189](https://erroneo.us/security/cve/CVE-2026-40189/index.md) goshs has a file-based ACL authorization bypass in goshs state-changing routes — Go github.com/patrickhener/goshs <= 1.1.4 → no fix - [CVE-2026-5412](https://erroneo.us/security/cve/CVE-2026-5412/index.md) Juju: CloudSpec method leaking cloud credentials — Go github.com/juju/juju < 0.0.0-20260408003526-d395054dc2c3 → 0.0.0-20260408003526-d395054dc2c3 - [CVE-2026-40288](https://erroneo.us/security/cve/CVE-2026-40288/index.md) PraisonAI has critical RCE via `type: job` workflow YAML — PyPI praisonaiagents <= 1.5.139 → 1.5.140; PyPI PraisonAI <= 4.5.138 → 4.5.139 - [CVE-2026-40111](https://erroneo.us/security/cve/CVE-2026-40111/index.md) PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py) — PyPI praisonaiagents <= 1.5.126 → 1.5.128 - [CVE-2026-34178](https://erroneo.us/security/cve/CVE-2026-34178/index.md) LXD: Importing a crafted backup leads to project restriction bypass — Go github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix - [CVE-2026-40154](https://erroneo.us/security/cve/CVE-2026-40154/index.md) PraisonAI Vulnerable Untrusted Remote Template Code Execution — PyPI PraisonAI < 4.5.128 → 4.5.128 - [CVE-2026-40258](https://erroneo.us/security/cve/CVE-2026-40258/index.md) gramps-webapi: Zip Slip Path Traversal in Media Archive Import — PyPI gramps-webapi >= 1.6.0, <= 3.11.0 → 3.11.1 - [CVE-2026-34177](https://erroneo.us/security/cve/CVE-2026-34177/index.md) LXD: VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf — Go github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix - [CVE-2026-5059](https://erroneo.us/security/cve/CVE-2026-5059/index.md) aws-mcp has a Command Injection Remote Code Execution Vulnerability — PyPI aws-mcp <= 1.7.0 → no fix - [CVE-2026-34179](https://erroneo.us/security/cve/CVE-2026-34179/index.md) LXD: Update of type field in restricted TLS certificate allows privilege escalation to cluster admin — Go github.com/canonical/lxd >= 0.0.0-20210305023314-538ac3df036e, <= 0.0.0-20260226085519-736f34afb267 → no fix - [GHSA-9cp7-j3f8-p5jx](https://erroneo.us/security/ghsa/GHSA-9cp7-j3f8-p5jx/index.md) Daptin has Unauthenticated Path Traversal and Zip Slip — Go github.com/daptin/daptin <= 0.11.3 → 0.12.0 - [CVE-2026-40157](https://erroneo.us/security/cve/CVE-2026-40157/index.md) PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack` — PyPI PraisonAI >= 2.7.2, < 4.5.128 → 4.5.128 - [CVE-2026-40289](https://erroneo.us/security/cve/CVE-2026-40289/index.md) PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions — PyPI praisonaiagents <= 1.5.139 → 1.5.140; PyPI PraisonAI <= 4.5.138 → 4.5.139 - [CVE-2026-1115](https://erroneo.us/security/cve/CVE-2026-1115/index.md) parisneo/lollms vulnerable to stored XSS in the social feature — PyPI lollms < 2.2.0 → 2.2.0 - [CVE-2026-41679](https://erroneo.us/security/cve/CVE-2026-41679/index.md) paperclip Vulnerable to Unauthenticated Remote Code Execution via Import Authorization Bypass — npm paperclipai < 2026.410.0 → 2026.410.0; npm @paperclipai/server < 2026.410.0 → 2026.410.0 - [CVE-2026-40093](https://erroneo.us/security/cve/CVE-2026-40093/index.md) nimiq-blockchain is missing a wall-clock upper bound on block timestamps — crates.io (Rust) nimiq-blockchain <= 1.3.0 → no fix - [CVE-2026-40177](https://erroneo.us/security/cve/CVE-2026-40177/index.md) ajenti.plugin.core has password bypass when 2FA is activated — PyPI ajenti.plugin.core < 0.112 → 0.112 --- Source page: https://erroneo.us/security/2026-04-10/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt