---
title: "Security digest: May 11, 2026"
url: https://erroneo.us/security/2026-05-11/
description: "May 11, 2026 vulnerability digest: 1 brief (Mini Shai-Hulud); 9 critical advisories (Maven, npm, PyPI, Composer…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-05-11
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: May 11, 2026

1 editorial brief and 9 critical advisories.

## Take stock

- Check exposure: Mini Shai-Hulud . Teams that installed @tanstack Router/Start packages on May 11, 2026, or the Mistral, Guardrails AI, UiPath, OpenSearch or other worm-propagated versions during the campaign.
- npm: 4 critical advisories ( angular-expressions , @nyariv/sandboxjs , @tanstack/arktype-adapter , @tanstack/eslint-plugin-router , @tanstack/eslint-plugin-start , @tanstack/history , @tanstack/nitro-v2-vite-plugin , @tanstack/react-router …). Check with npm audit (or: npm ls <package>) .
- PyPI: 2 critical advisories ( pgadmin4 , PraisonAI ). Check with pip-audit (or: pip show <package>) .
- Maven: 1 critical advisory ( io.unitycatalog:unitycatalog-server ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- Composer (PHP): 1 critical advisory ( torrentpier/torrentpier ). Check with composer audit .
- Go: 1 critical advisory ( github.com/cloudnative-pg/cloudnative-pg ). Check with govulncheck ./... .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Check exposure** [Mini Shai-Hulud: TanStack npm Worm With Valid Provenance](https://erroneo.us/security/briefs/mini-shai-hulud-tanstack-npm-worm/index.md): If a lockfile picked up one of the bad TanStack Router/Start, Mistral or OpenSearch versions in mid-May 2026, treat that host as fully compromised and disable the dead-man's switch before rotating anything; everyone else can confirm and move on.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-27478](https://erroneo.us/security/cve/CVE-2026-27478/index.md) Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation — Maven io.unitycatalog:unitycatalog-server <= 0.4.0 → 0.4.1
- [CVE-2026-44643](https://erroneo.us/security/cve/CVE-2026-44643/index.md) Angular Expressions - Remote Code Execution using filters — npm angular-expressions <= 1.5.1 → 1.5.2
- [CVE-2026-7813](https://erroneo.us/security/cve/CVE-2026-7813/index.md) pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules — PyPI pgadmin4 < 9.15 → 9.15
- [GHSA-h29g-c9cx-c73q](https://erroneo.us/security/ghsa/GHSA-h29g-c9cx-c73q/index.md) torrentpier has PHP Serialize Injections — Composer (PHP) torrentpier/torrentpier <= 2.4.3 → 2.4.4
- [CVE-2026-43898](https://erroneo.us/security/cve/CVE-2026-43898/index.md) SandboxJS has a sandbox escape via Function.caller leakage of internal call op — npm @nyariv/sandboxjs <= 0.9.5 → 0.9.6
- [CVE-2026-45321](https://erroneo.us/security/cve/CVE-2026-45321/index.md) Malware in @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys — npm @tanstack/arktype-adapter = 1.166.12 → 1.166.16; npm @tanstack/eslint-plugin-router = 1.161.9 → 1.161.13; npm @tanstack/eslint-plugin-start = 0.0.4 → 0.0.8
- [CVE-2026-44336](https://erroneo.us/security/cve/CVE-2026-44336/index.md) PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection — PyPI PraisonAI <= 4.6.33 → 4.6.34
- [CVE-2026-25244](https://erroneo.us/security/cve/CVE-2026-25244/index.md) WebdriverIO BrowserStack Service has a Command Injection issue — npm @wdio/browserstack-service <= 9.23.2 → 9.24.0
- [CVE-2026-44477](https://erroneo.us/security/cve/CVE-2026-44477/index.md) CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE — Go github.com/cloudnative-pg/cloudnative-pg < 1.28.3 → 1.28.3; Go github.com/cloudnative-pg/cloudnative-pg >= 1.29.0, < 1.29.1 → 1.29.1

---
Source page: https://erroneo.us/security/2026-05-11/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt