---
title: "Security digest: July 30, 2026"
url: https://erroneo.us/security/2026-07-30/
description: "July 30, 2026 vulnerability digest: 1 brief (Claude Evals Reached 3 Real Orgs, Published a…); 4 critical advisories (RubyGems, PyPI, npm). What to patch and…"
type: security-digest-day
section: "Security Digest"
date_published: 2026-07-30
date_modified: 2026-08-03
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Security digest: July 30, 2026

1 editorial brief and 4 critical advisories.

## Take stock

- Most can relax: Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer . The three affected organizations Anthropic notified, plus teams whose scanners or CI jobs automatically install newly published PyPI packages while real credentials are present.
- PyPI: 2 critical advisories ( flyto-core ). Check with pip-audit (or: pip show <package>) .
- RubyGems: 1 critical advisory ( activestorage ). Check with bundle audit check --update .
- npm: 1 critical advisory ( @aws-amplify/codegen-ui-react ). Check with npm audit (or: npm ls <package>) .
- None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully.

## Editorial briefs

- **Most can relax** [Claude Evals Reached 3 Real Orgs, Published a PyPI Stealer](https://erroneo.us/security/briefs/anthropic-claude-evals-real-systems-pypi-package/index.md): Unless Anthropic has contacted you, there is nothing to patch or rotate; the lesson is how one unvetted install of a brand-new package handed a security vendor's credentials to an agent.

## Known exploited (CISA KEV)

None.

## Critical advisories

- [CVE-2026-66066](https://erroneo.us/security/cve/CVE-2026-66066/index.md) Active Storage has possible arbitrary file read and remote code execution in Active Storage variant processing — RubyGems activestorage < 7.2.3.2 → 7.2.3.2; RubyGems activestorage >= 8.0.0.beta1, < 8.0.5.1 → 8.0.5.1; RubyGems activestorage >= 8.1.0.beta1, < 8.1.3.1 → 8.1.3.1
- [CVE-2026-67426](https://erroneo.us/security/cve/CVE-2026-67426/index.md) Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration — PyPI flyto-core >= 2.26.6, < 2.26.7 → 2.26.7
- [CVE-2025-4318](https://erroneo.us/security/cve/CVE-2025-4318/index.md) AWS Amplify Studio UI Component Properties Has an Input Validation Issue — npm @aws-amplify/codegen-ui-react <= 2.20.2 → 2.20.3
- [CVE-2026-67429](https://erroneo.us/security/cve/CVE-2026-67429/index.md) Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules) — PyPI flyto-core < 2.26.7 → 2.26.7

---
Source page: https://erroneo.us/security/2026-07-30/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt