---
title: "Security digest: June 19, 2026"
url: https://erroneo.us/security/2026-06-19/
description: "June 19, 2026 vulnerability digest: 9 critical advisories (NuGet, Go, npm, Maven, PyPI…). What to patch and who can relax."
type: security-digest-day
section: "Security Digest"
date_published: 2026-06-19
date_modified: 2026-06-19
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: June 19, 2026

9 critical advisories.

## Take stock

- NuGet: 2 critical advisories ( CoreWCF.Primitives , DotVVM ). Check with dotnet list package --vulnerable --include-transitive .
- Go: 2 critical advisories ( github.com/crossplane/crossplane/v2 , github.com/crossplane/crossplane , github.com/tilt-dev/tilt ). Check with govulncheck ./... .
- npm: 2 critical advisories ( network-ai ). Check with npm audit (or: npm ls <package>) .
- Maven: 1 critical advisory ( io.openremote:openremote-manager ). Check with mvn dependency:tree -Dincludes=<groupId>:<artifactId> .
- PyPI: 1 critical advisory ( langflow ). Check with pip-audit (or: pip show <package>) .
- Composer (PHP): 1 critical advisory ( craftcms/cms ). Check with composer audit .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-54782](https://erroneo.us/security/cve/CVE-2026-54782/index.md) CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation — NuGet CoreWCF.Primitives < 1.8.1 → 1.8.1; NuGet CoreWCF.Primitives >= 1.9.0, < 1.9.1 → 1.9.1
- [GHSA-wfqx-gjrf-g28r](https://erroneo.us/security/ghsa/GHSA-wfqx-gjrf-g28r/index.md) Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag — Go github.com/crossplane/crossplane/v2 >= 2.3.0-rc.0, <= 2.3.2 → 2.3.3; Go github.com/crossplane/crossplane/v2 <= 2.2.2 → 2.2.3; Go github.com/crossplane/crossplane <= 1.21.0-rc.0 → no fix
- [CVE-2026-48814](https://erroneo.us/security/cve/CVE-2026-48814/index.md) Network-AI: CVE-2026-46701 fix incomplete — empty default secret still authorizes all requests — npm network-ai <= 5.7.1 → 5.7.2
- [CVE-2026-54051](https://erroneo.us/security/cve/CVE-2026-54051/index.md) Network-AI: Improper Neutralization of Special Elements used in an OS Command — npm network-ai < 5.9.1 → 5.9.1
- [CVE-2026-56120](https://erroneo.us/security/cve/CVE-2026-56120/index.md) OpenRemote Manager: removeAlarms cross-realm IDOR (bulk delete) — Maven io.openremote:openremote-manager < 1.25.0 → 1.25.0
- [CVE-2026-55447](https://erroneo.us/security/cve/CVE-2026-55447/index.md) Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit — PyPI langflow < 1.9.2 → 1.9.2
- [GHSA-c8qj-jx8j-fg2w](https://erroneo.us/security/ghsa/GHSA-c8qj-jx8j-fg2w/index.md) DotVVM: Missing authorization in AuthorizeActionFilter — NuGet DotVVM < 4.2.11 → 4.2.11; NuGet DotVVM > 4.3.0-preview01-final, < 4.3.15 → 4.3.15; NuGet DotVVM >= 5.0.0-preview01-final, < 5.0.0-preview09-final → 5.0.0-preview09-final
- [CVE-2026-55884](https://erroneo.us/security/cve/CVE-2026-55884/index.md) Tilt: Missing authentication on the network-exposed Tilt HUD server — Go github.com/tilt-dev/tilt >= 0.20.8, <= 0.37.3 → 0.37.4
- [CVE-2026-55791](https://erroneo.us/security/cve/CVE-2026-55791/index.md) Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs — Composer (PHP) craftcms/cms >= 5.0.0-RC1, < 5.10 → 5.10; Composer (PHP) craftcms/cms >= 4.0.0-RC1, < 4.18 → 4.18

---
Source page: https://erroneo.us/security/2026-06-19/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt