Digest · Friday

Security digest: April 17, 2026

13 critical advisories.

Take stock

npm: 4 critical advisories (openclaw, flowise, flowise-components, math-codegen). Check with npm audit (or: npm ls <package>).
PyPI: 3 critical advisories (openviking, sentry, praisonai). Check with pip-audit (or: pip show <package>).
Go: 2 critical advisories (charm.land/wish/v2, github.com/charmbracelet/wish, github.com/nhost/nhost). Check with govulncheck ./....
crates.io (Rust): 2 critical advisories (zebrad, zebra-script, zebra-chain). Check with cargo audit.
Composer (PHP): 1 critical advisory (dolibarr/dolibarr). Check with composer audit.
Maven: 1 critical advisory (org.bouncycastle:bcprov-jdk14, org.bouncycastle:bcprov-jdk15to18, org.bouncycastle:bcprov-jdk18on, org.bouncycastle:bcprov-debug-jdk14, org.bouncycastle:bcprov-debug-jdk15to18, org.bouncycastle:bcprov-debug-jdk18on, org.bouncycastle:bcprov-ext-jdk14, org.bouncycastle:bcprov-ext-jdk15to18 …). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Check: npm audit (or: npm ls <package>)

OpenClaw: Gateway HTTP endpoints re-resolve bearer auth after SecretRef rotation CVE-2026-43585 CVSS 9.2 Critical
openclaw < 2026.4.15 → fixed in 2026.4.15
OpenClaw: Feishu webhook and card-action validation now fail closed CVE-2026-44109 CVSS 9.2 Critical
openclaw < 2026.4.15 → fixed in 2026.4.15
Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability CVE-2026-41265 CVSS 9.2 Critical
flowise <= 3.0.13 → fixed in 3.1.0; flowise-components <= 3.0.13 → fixed in 3.1.0
Remote Code Execution (RCE) via String Literal Injection into math-codegen CVE-2026-41507 CVSS 9.8 Critical
math-codegen < 0.4.3 → fixed in 0.4.3

Check: pip-audit (or: pip show <package>)

OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes CVE-2026-40525 CVSS 9.1 Critical
openviking < 0.3.9 → fixed in 0.3.9
Sentry: Improper authentication on SAML SSO process allows user identity linking CVE-2026-27197 CVSS 9.1 Critical
sentry >= 21.12.0, < 26.2.0 → no fix listed
PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection CVE-2026-41497 CVSS 9.8 Critical
praisonai <= 4.5.148 → fixed in 4.5.149

Check: govulncheck ./...

Wish has SCP Path Traversal that allows arbitrary file read/write CVE-2026-41589 CVSS 9.6 Critical
charm.land/wish/v2 < 2.0.1 → fixed in 2.0.1; github.com/charmbracelet/wish <= 1.4.7 → no fix listed
Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass CVE-2026-41574 CVSS 9.3 Critical
github.com/nhost/nhost < 0.0.0-20260417112436-ec8dab3f2cf4 → fixed in 0.0.0-20260417112436-ec8dab3f2cf4

Check: cargo audit

Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling CVE-2026-41583 CVSS 9.3 Critical
zebrad < 4.3.1 → fixed in 4.3.1; zebra-script < 5.0.2 → fixed in 5.0.2
Zebra has rk Identity Point Panic in Transaction Verification CVE-2026-41584 CVSS 9.2 Critical
zebrad < 4.3.1 → fixed in 4.3.1; zebra-chain < 6.0.2 → fixed in 6.0.2

Check: composer audit

Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration CVE-2026-23500 CVSS 9.4 Critical
dolibarr/dolibarr <= 22.0.4 → no fix listed

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks CVE-2025-14813 CVSS 9.3 Critical
org.bouncycastle:bcprov-jdk14 >= 1.59, <= 1.80.1 → no fix listed; org.bouncycastle:bcprov-jdk15to18 >= 1.59, <= 1.80.1 → no fix listed; org.bouncycastle:bcprov-jdk18on >= 1.59, <= 1.80.1 → fixed in 1.80.2; +23 more packages