--- title: "Security digest: October 5, 2026" url: https://erroneo.us/security/2026-10-05/ description: "October 5, 2026 vulnerability digest: 1 brief (Atlassian Data Center File Read CVE-2026-21589…); 17 critical advisories (npm, Maven, Swift, PyPI). What to…" type: security-digest-day section: "Security Digest" date_published: 2026-10-05 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: October 5, 2026 1 editorial brief and 17 critical advisories. ## Take stock - Act now: Atlassian Data Center File Read CVE-2026-21589 Exploited . Anyone running self-managed Jira, Jira Service Management, Confluence, Bitbucket, Bamboo, Crowd, Crucible or Fisheye, especially instances reachable from the internet. - npm: 15 critical advisories ( vm2 , simple-git , @simple-git/argv-parser , @capacitor/android , @capacitor/ios , seroval , proxy-addr , tinypool ). Check with npm audit (or: npm ls ) . - PyPI: 2 critical advisories ( langflow ). Check with pip-audit (or: pip show ) . - Maven: 1 critical advisory ( com.capacitorjs:core ). Check with mvn dependency:tree -Dincludes=: . - Swift: 1 critical advisory ( github.com/ionic-team/capacitor-swift-pm ). Check with swift package show-dependencies . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Act now** [Atlassian Data Center File Read CVE-2026-21589 Exploited](https://erroneo.us/security/briefs/atlassian-data-center-file-read-cve-2026-21589/index.md): Every self-managed Atlassian Data Center product is affected, a public detection script exists and CISA confirms exploitation; patch to a fixed LTS or block traversal patterns at the edge today. ## Known exploited (CISA KEV) None. ## Critical advisories - [CVE-2026-92934](https://erroneo.us/security/cve/CVE-2026-92934/index.md) vm2 sandbox escape to host RCE via revisited host-wrapped AggregateError bypassing Error sanitization cycle short-circuit — npm vm2 <= 3.11.7 → 3.11.8 - [CVE-2026-102828](https://erroneo.us/security/cve/CVE-2026-102828/index.md) simple-git unsafe-operation guard does not block trailer command configuration — npm simple-git >= 3.15.0, < 4.0.1 → 4.0.1 - [CVE-2026-92956](https://erroneo.us/security/cve/CVE-2026-92956/index.md) vm2 sandbox escape via WebAssembly.compileStreaming Promise species bypass — npm vm2 >= 3.10.1, <= 3.11.6 → 3.11.7 - [CVE-2026-102829](https://erroneo.us/security/cve/CVE-2026-102829/index.md) simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection — npm @simple-git/argv-parser < 2.0.1 → 2.0.1 - [CVE-2026-103922](https://erroneo.us/security/cve/CVE-2026-103922/index.md) Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path — npm @capacitor/android >= 6.0.0, < 6.2.2 → 6.2.2; npm @capacitor/android >= 7.0.0, < 7.6.9 → 7.6.9; npm @capacitor/ios >= 6.0.0, < 6.2.2 → 6.2.2 - [CVE-2026-104846](https://erroneo.us/security/cve/CVE-2026-104846/index.md) Seroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of GHSA-mv8w-475r-vwqw) — npm seroval >= 0.12.0, <= 1.6.0 → 1.6.2 - [CVE-2026-9205](https://erroneo.us/security/cve/CVE-2026-9205/index.md) Langflow: Weak Fernet Key via random.seed() — PyPI langflow <= 1.10.0 → 1.10.1 - [CVE-2026-90711](https://erroneo.us/security/cve/CVE-2026-90711/index.md) proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet — npm proxy-addr >= 1.1.0, < 2.0.8 → 2.0.8 - [CVE-2026-92946](https://erroneo.us/security/cve/CVE-2026-92946/index.md) vm2: NodeVM `require.external` without an explicit `require.root` grants unrestricted host filesystem access and full RCE — npm vm2 <= 3.11.6 → 3.11.7 - [CVE-2026-92954](https://erroneo.us/security/cve/CVE-2026-92954/index.md) vm2: Host-returned Promise rejection can bypass vm2's unhandled-rejection hardening and terminate the host process — npm vm2 >= 3.10.0, <= 3.11.7 → 3.11.8 - [CVE-2026-92947](https://erroneo.us/security/cve/CVE-2026-92947/index.md) vm2: Sandboxed code can read and write host-realm memory via Node's shared Buffer pool — npm vm2 <= 3.11.6 → 3.11.7 - [CVE-2026-8505](https://erroneo.us/security/cve/CVE-2026-8505/index.md) Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass — PyPI langflow >= 1.7.0, <= 1.9.0 → 1.9.1 - [CVE-2026-92955](https://erroneo.us/security/cve/CVE-2026-92955/index.md) vm2: Sandbox Escape (NodeVM) — npm vm2 <= 3.11.7 → 3.11.8 - [CVE-2026-104849](https://erroneo.us/security/cve/CVE-2026-104849/index.md) Tinypool: Prototype Pollution Gadget to RCE in run() options — npm tinypool < 2.1.2 → 2.1.2 - [CVE-2026-100721](https://erroneo.us/security/cve/CVE-2026-100721/index.md) vm2: NodeVM custom resolution bypasses external path boundaries — npm vm2 <= 3.12.1 → 3.12.2 - [CVE-2026-104848](https://erroneo.us/security/cve/CVE-2026-104848/index.md) Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution — npm tinypool <= 2.1.0 → 2.1.1 - [CVE-2026-92953](https://erroneo.us/security/cve/CVE-2026-92953/index.md) vm2: Default VM can mutate host TypedArray and ArrayBuffer intrinsics after the host-prototype pollution fix — npm vm2 >= 3.11.0, <= 3.11.7 → 3.11.8 --- Source page: https://erroneo.us/security/2026-10-05/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt