Digest · Friday

Security digest: June 19, 2026

9 critical advisories.

Take stock

NuGet: 2 critical advisories (CoreWCF.Primitives, DotVVM). Check with dotnet list package --vulnerable --include-transitive.
Go: 2 critical advisories (github.com/crossplane/crossplane/v2, github.com/crossplane/crossplane, github.com/tilt-dev/tilt). Check with govulncheck ./....
npm: 2 critical advisories (network-ai). Check with npm audit (or: npm ls <package>).
Maven: 1 critical advisory (io.openremote:openremote-manager). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId>.
PyPI: 1 critical advisory (langflow). Check with pip-audit (or: pip show <package>).
Composer (PHP): 1 critical advisory (craftcms/cms). Check with composer audit.
None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

Added to CISA’s catalog on this day: confirmed exploitation in the wild. Due date = CISA’s deadline for US federal agencies.

None.

GitHub-reviewed advisories rated critical, published this day (Pacific time).

Check: govulncheck ./...

Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag GHSA-wfqx-gjrf-g28r CVSS 9.0 Critical
github.com/crossplane/crossplane/v2 >= 2.3.0-rc.0, <= 2.3.2 → fixed in 2.3.3; github.com/crossplane/crossplane/v2 <= 2.2.2 → fixed in 2.2.3; github.com/crossplane/crossplane <= 1.21.0-rc.0 → no fix listed
Tilt: Missing authentication on the network-exposed Tilt HUD server CVE-2026-55884 CVSS 9.2 Critical
github.com/tilt-dev/tilt >= 0.20.8, <= 0.37.3 → fixed in 0.37.4

Check: npm audit (or: npm ls <package>)

Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests CVE-2026-48814 CVSS 9.1 Critical
network-ai <= 5.7.1 → fixed in 5.7.2
Network-AI: Improper Neutralization of Special Elements used in an OS Command CVE-2026-54051 CVSS 9.9 Critical
network-ai < 5.9.1 → fixed in 5.9.1

Check: dotnet list package --vulnerable --include-transitive

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation CVE-2026-54782 CVSS 10.0 Critical
CoreWCF.Primitives < 1.8.1 → fixed in 1.8.1; CoreWCF.Primitives >= 1.9.0, < 1.9.1 → fixed in 1.9.1
DotVVM: Missing authorization in AuthorizeActionFilter GHSA-c8qj-jx8j-fg2w CVSS 9.2 Critical
DotVVM < 4.2.11 → fixed in 4.2.11; DotVVM > 4.3.0-preview01-final, < 4.3.15 → fixed in 4.3.15; DotVVM >= 5.0.0-preview01-final, < 5.0.0-preview09-final → fixed in 5.0.0-preview09-final

Check: composer audit

Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs CVE-2026-55791 CVSS 9.2 Critical
craftcms/cms >= 5.0.0-RC1, < 5.10 → fixed in 5.10; craftcms/cms >= 4.0.0-RC1, < 4.18 → fixed in 4.18

Check: mvn dependency:tree -Dincludes=<groupId>:<artifactId>

OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete) CVE-2026-56120 CVSS 9.6 Critical
io.openremote:openremote-manager < 1.25.0 → fixed in 1.25.0

Check: pip-audit (or: pip show <package>)

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit CVE-2026-55447 CVSS 9.6 Critical
langflow < 1.9.2 → fixed in 1.9.2