StackPrism

Monthly report

What your agent missed in February 2026

In February 2026, CISA added 3 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 16 critical advisories for widely used npm and PyPI packages, 2 release lines reached end of life and 1 new release line shipped.

  • 3Exploited in the wild
  • 16Critical advisories
  • 2Reached end of life
  • 1New release lines

The ones to know first

The most widely used software among this month’s items, one of each kind.

  • CVE-2025-11953 added to CISA’s exploited list (React Native CLI)

    React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro…

    , CISA KEV

  • langflow: remote code execution in CSV agent (critical)

    , GitHub Advisory Database

  • Kubernetes 1.32 reached end of life

    No more security fixes. Latest: Kubernetes 1.37.

    , endoflife.date

Everything in February 2026

Exploited in the wild3

  • CVE-2021-22175 added to CISA’s exploited list (GitLab)

    GitLab contains a server-side request forgery (SSRF) vulnerability when requests to the internal network for webhooks are enabled.

    , CISA KEV

  • CVE-2025-11953 added to CISA’s exploited list (React Native CLI)

    React Native Community CLI contains an OS command injection vulnerability which could allow unauthenticated network attackers to send POST requests to the Metro…

    , CISA KEV

  • CVE-2021-39935 added to CISA’s exploited list (GitLab)

    GitLab Community and Enterprise Editions contain a server-side request forgery vulnerability which could allow unauthorized external users to perform Server Side…

    , CISA KEV

Critical advisories16

Reached end of life2

  • Kubernetes 1.32 reached end of life

    No more security fixes. Latest: Kubernetes 1.37.

    , endoflife.date

  • Go 1.24 reached end of life

    No more security fixes. Latest: Go 1.27.

    , endoflife.date

New release lines1

Which models can’t know this

These models have a knowledge cutoff before February 2026, so none of them knows about any of this unless a tool gives it live data.

Anthropic

xAI

Microsoft

OpenAI

Google

Meta

Claude Fable 5.1, Claude Opus 5.5, Claude Sonnet 5.5, Claude Haiku 5.5, Claude Opus 5, GPT-6.1 Sol, GPT-6 Astra, GPT-6 Sol, GPT-6 Luna, GPT-5.6 Sol, Gemini 4 Argon, Gemini 3.8 Flash, Grok 4.7 have cutoffs in or after February 2026, so they may know some of it.

Last checked against CISA KEV, GitHub Advisory Database and endoflife.date.

What counts: vulnerabilities CISA confirms are exploited, in software web apps commonly run; critical GitHub advisories on widely used npm and PyPI packages; and release lines of popular runtimes, frameworks and databases reaching end of life or shipping. Also as Markdown.