--- title: "Security digest: May 8, 2026" url: https://erroneo.us/security/2026-05-08/ description: "May 8, 2026 vulnerability digest: 1 CISA KEV addition (BerriAI); 18 critical advisories (Composer (PHP), npm, Go…). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-05-08 date_modified: 2026-05-08 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: May 8, 2026 1 known exploited (cisa kev) addition and 18 critical advisories. ## Take stock - Do you run any of these? BerriAI LiteLLM. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2026-05-11. - Go: 7 critical advisories ( github.com/free5gc/nef , github.com/free5gc/smf , github.com/siyuan-note/siyuan/kernel ). Check with govulncheck ./... . - npm: 6 critical advisories ( @profullstack/mcp-server , electerm , vm2 , cline ). Check with npm audit (or: npm ls ) . - Composer (PHP): 2 critical advisories ( snipe/snipe-it , prestashop/prestashop ). Check with composer audit . - PyPI: 2 critical advisories ( dash-uploader , open-webui ). Check with pip-audit (or: pip show ) . - crates.io (Rust): 1 critical advisory ( zebrad , zebra-script ). Check with cargo audit . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) - [CVE-2026-42208](https://erroneo.us/security/cve/CVE-2026-42208/index.md) BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability (CISA due 2026-05-11) ## Critical advisories - [CVE-2026-37709](https://erroneo.us/security/cve/CVE-2026-37709/index.md) Snipe-IT has insecure permissions in file uploads — Composer (PHP) snipe/snipe-it < 8.4.1 → 8.4.1 - [CVE-2026-44212](https://erroneo.us/security/cve/CVE-2026-44212/index.md) PrestaShop has a stored XSS executable in customer service view — Composer (PHP) prestashop/prestashop < 8.2.6 → 8.2.6; Composer (PHP) prestashop/prestashop >= 9.0.0, < 9.1.1 → 9.1.1 - [GHSA-v6wj-c83f-v46x](https://erroneo.us/security/ghsa/GHSA-v6wj-c83f-v46x/index.md) @profullstack/mcp-server vulnerable to OS Command Injection in domain_lookup Module — npm @profullstack/mcp-server <= 1.4.12 → no fix - [CVE-2026-44330](https://erroneo.us/security/cve/CVE-2026-44330/index.md) free5GC's NEF nnef-pfdmanagement API is unauthenticated; forged bearer tokens can read PFD data and create/delete PFD subscriptions — Go github.com/free5gc/nef <= 1.2.3 → no fix - [GHSA-pvmv-cwg8-v6c8](https://erroneo.us/security/ghsa/GHSA-pvmv-cwg8-v6c8/index.md) Zebra v4.4.0 still accepts V5 SIGHASH_SINGLE without a corresponding output — crates.io (Rust) zebrad < 4.4.1 → 4.4.1; crates.io (Rust) zebra-script < 6.0.1 → 6.0.1 - [CVE-2026-43944](https://erroneo.us/security/cve/CVE-2026-43944/index.md) Electerm users can run dangrous code through link or command line — npm electerm >= 3.0.6, < 3.8.8 → 3.8.8 - [CVE-2026-43940](https://erroneo.us/security/cve/CVE-2026-43940/index.md) Electerm runWidget has a path traversal that leads to arbitrary code execution — npm electerm < 3.7.16 → 3.7.16 - [CVE-2026-44327](https://erroneo.us/security/cve/CVE-2026-44327/index.md) free5GC's NEF nnef-oam route group is unauthenticated; no-token requests reach the OAM handler — Go github.com/free5gc/nef <= 1.2.3 → no fix - [CVE-2026-44009](https://erroneo.us/security/cve/CVE-2026-44009/index.md) vm2 has Sandbox Breakout Through Null Proto Exception — npm vm2 < 3.11.2 → 3.11.2 - [CVE-2026-44008](https://erroneo.us/security/cve/CVE-2026-44008/index.md) vm2 has sandbox breakout via `neutralizeArraySpeciesBatch` — npm vm2 <= 3.11.1 → 3.11.2 - [CVE-2026-44315](https://erroneo.us/security/cve/CVE-2026-44315/index.md) free5GC's NEF 3gpp-pfd-management API is unauthenticated; forged bearer tokens can create, read, and delete PFD transactions — Go github.com/free5gc/nef <= 1.2.3 → no fix - [CVE-2026-44211](https://erroneo.us/security/cve/CVE-2026-44211/index.md) Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability — npm cline <= 2.13.0 → no fix - [CVE-2026-38360](https://erroneo.us/security/cve/CVE-2026-38360/index.md) dash-uploader has a directory traversal vulnerability — PyPI dash-uploader >= 0.1.0, <= 0.7.0a2 → no fix - [CVE-2026-44326](https://erroneo.us/security/cve/CVE-2026-44326/index.md) free5GC's NEF 3gpp-traffic-influence API is unauthenticated; missing or forged bearer tokens can create, read, patch, and delete subscriptions — Go github.com/free5gc/nef <= 1.2.3 → no fix - [CVE-2026-44329](https://erroneo.us/security/cve/CVE-2026-44329/index.md) free5GC's SMF UPI management interface lacks auth middleware; unauthenticated topology read/write requests reach handlers — Go github.com/free5gc/smf < 1.4.3 → 1.4.3 - [CVE-2026-44551](https://erroneo.us/security/cve/CVE-2026-44551/index.md) Open WebUI has an LDAP Empty Password Authentication Bypass — PyPI open-webui <= 0.8.12 → 0.9.0 - [CVE-2026-44670](https://erroneo.us/security/cve/CVE-2026-44670/index.md) SiYuan Affected by Stored XSS via Attribute View Name to Electron Renderer RCE — Go github.com/siyuan-note/siyuan/kernel <= 0.0.0-20260421031503-96dfe0bea474 → 0.0.0-20260512140701-d7b77d945e0d - [CVE-2026-44588](https://erroneo.us/security/cve/CVE-2026-44588/index.md) SiYuan: Electron Renderer RCE via decodeURIComponent-driven tooltip XSS in aria-label sink (incomplete fix for CVE-2026-34585) — Go github.com/siyuan-note/siyuan/kernel <= 0.0.0-20260421031503-96dfe0bea474 → no fix --- Source page: https://erroneo.us/security/2026-05-08/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt