--- title: "Security digest: May 12, 2026" url: https://erroneo.us/security/2026-05-12/ description: "May 12, 2026 vulnerability digest: 19 critical advisories (PyPI, Maven, npm, Go). What to patch and who can relax." type: security-digest-day section: "Security Digest" date_published: 2026-05-12 date_modified: 2026-05-12 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: May 12, 2026 19 critical advisories. ## Take stock - PyPI: 9 critical advisories ( ludwig , guardrails-ai , mamba-ssm , horovod , imgaug , llm , syft , kubectl-mcp-server ). Check with pip-audit (or: pip show ) . - Maven: 6 critical advisories ( io.github.davidalmeidac:sealed-env-core , org.apache.tomcat.embed:tomcat-embed-core , org.apache.tomcat:tomcat , org.apache.tomcat:tomcat-coyote , org.mapfish.print:print-lib , org.mapfish.print:print-servlet , org.apache.tomcat:tomcat-catalina , com.azure:azure-security-keyvault-keys ). Check with mvn dependency:tree -Dincludes=: . - npm: 5 critical advisories ( sealed-env , openclaude , sillytavern , kubectl-mcp-server ). Check with npm audit (or: npm ls ) . - Go: 1 critical advisory ( github.com/hahwul/dalfox/v2 ). Check with govulncheck ./... . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2026-31238](https://erroneo.us/security/cve/CVE-2026-31238/index.md) Ludwig framework is vulnerable to insecure deserialization in its model serving component — PyPI ludwig <= 0.10.4 → no fix - [CVE-2026-45091](https://erroneo.us/security/cve/CVE-2026-45091/index.md) sealed-env: TOTP secret embedded in unseal token payload (enterprise mode) — npm sealed-env < 0.1.0-alpha.4 → 0.1.0-alpha.4; Maven io.github.davidalmeidac:sealed-env-core < 0.1.0-alpha.4 → 0.1.0-alpha.4 - [CVE-2026-31237](https://erroneo.us/security/cve/CVE-2026-31237/index.md) Ludwig framework is vulnerable to insecure deserialization through its predict() method. — PyPI ludwig <= 0.10.4 → no fix - [CVE-2026-45087](https://erroneo.us/security/cve/CVE-2026-45087/index.md) Dalfox Server Mode Vulnerable to Unauthenticated Remote Code Execution via `found-action` — Go github.com/hahwul/dalfox/v2 <= 2.12.0 → 2.13.0 - [CVE-2026-31233](https://erroneo.us/security/cve/CVE-2026-31233/index.md) Guardrails AI contains a code injection vulnerability in its Hub package installation mechanism — PyPI guardrails-ai <= 0.6.7 → no fix - [CVE-2026-41293](https://erroneo.us/security/cve/CVE-2026-41293/index.md) Apache Tomcat - HTTP/2 request headers not validated — Maven org.apache.tomcat.embed:tomcat-embed-core >= 10.1.0-M1, < 10.1.55 → 10.1.55; Maven org.apache.tomcat.embed:tomcat-embed-core >= 11.0.0-M1, < 11.0.22 → 11.0.22; Maven org.apache.tomcat:tomcat >= 10.1.0-M1, < 10.1.55 → 10.1.55 - [CVE-2026-44672](https://erroneo.us/security/cve/CVE-2026-44672/index.md) Mapfish Print: Remote Code Injection (RCE) in Dynamic table — Maven org.mapfish.print:print-lib >= 3.23.0, < 3.28.28 → 3.28.28; Maven org.mapfish.print:print-lib >= 3.29.0, < 3.30.30 → 3.30.30; Maven org.mapfish.print:print-lib >= 3.31.0, < 3.31.21 → 3.31.21 - [CVE-2026-31239](https://erroneo.us/security/cve/CVE-2026-31239/index.md) mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub — PyPI mamba-ssm <= 2.2.6 → no fix - [CVE-2026-31234](https://erroneo.us/security/cve/CVE-2026-31234/index.md) Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component — PyPI horovod <= 0.28.1 → no fix - [CVE-2026-42074](https://erroneo.us/security/cve/CVE-2026-42074/index.md) OpenClaude Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input — npm openclaude < 0.5.1 → 0.5.1 - [CVE-2026-43512](https://erroneo.us/security/cve/CVE-2026-43512/index.md) Apache Tomcat - Digest authenticator will authenticate any unknown user — Maven org.apache.tomcat.embed:tomcat-embed-core < 9.0.118 → 9.0.118; Maven org.apache.tomcat.embed:tomcat-embed-core >= 10.1.0-M1, < 10.1.55 → 10.1.55; Maven org.apache.tomcat.embed:tomcat-embed-core >= 11.0.0-M1, < 11.0.22 → 11.0.22 - [CVE-2026-44649](https://erroneo.us/security/cve/CVE-2026-44649/index.md) SillyTavern has Authentication Bypass via SSO Header Injection — npm sillytavern <= 1.17.0 → 1.18.0 - [CVE-2026-31235](https://erroneo.us/security/cve/CVE-2026-31235/index.md) imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module — PyPI imgaug <= 0.4.0 → no fix - [CVE-2026-31236](https://erroneo.us/security/cve/CVE-2026-31236/index.md) llm CLI tool contains a code injection vulnerability via `--functions` command-line argument — PyPI llm <= 0.27.1 → no fix - [CVE-2026-31220](https://erroneo.us/security/cve/CVE-2026-31220/index.md) PySyft server-side arbitrary Python execution after code approval — PyPI syft <= 0.9.5 → no fix - [CVE-2026-33117](https://erroneo.us/security/cve/CVE-2026-33117/index.md) Security feature bypass vulnerability in Azure Key Vault Keys library for Java — Maven com.azure:azure-security-keyvault-keys < 4.10.6 → 4.10.6 - [CVE-2025-65719](https://erroneo.us/security/cve/CVE-2025-65719/index.md) Open Source Kubectl MCP Server vulnerable to arbitrary code execution via user interaction with crafted HTML page — npm kubectl-mcp-server < 1.2.0 → 1.2.0; PyPI kubectl-mcp-server < 1.2.0 → 1.2.0 - [CVE-2026-44650](https://erroneo.us/security/cve/CVE-2026-44650/index.md) SillyTavern has a Path Traversal issue — npm sillytavern <= 1.17.0 → 1.18.0 - [CVE-2026-43515](https://erroneo.us/security/cve/CVE-2026-43515/index.md) Apache Tomcat - Security constraints not correctly applied — Maven org.apache.tomcat.embed:tomcat-embed-core < 9.0.118 → 9.0.118; Maven org.apache.tomcat.embed:tomcat-embed-core >= 10.1.0-M1, < 10.1.55 → 10.1.55; Maven org.apache.tomcat.embed:tomcat-embed-core >= 11.0.0-M1, < 11.0.22 → 11.0.22 --- Source page: https://erroneo.us/security/2026-05-12/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt