What your agent missed in March 2026

CVE-2026-33634 added to CISA’s exploited list (Trivy)

Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all…

Mar 26, 2026, CISA KEV

CVE-2026-33017 added to CISA’s exploited list (Langflow)

Langflow contains a code injection vulnerability that could allow building public flows without requiring authentication.

Mar 25, 2026, CISA KEV

CVE-2025-32432 added to CISA’s exploited list (Craft CMS)

Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary code.

Mar 20, 2026, CISA KEV

CVE-2025-54068 added to CISA’s exploited list (Laravel Livewire)

Laravel Livewire contain a code injection vulnerability that could allow unauthenticated attackers to achieve remote command execution in specific scenarios.

Mar 20, 2026, CISA KEV

CVE-2025-68613 added to CISA’s exploited list (n8n)

n8n contains an improper control of dynamically managed code resources vulnerability in its workflow expression evaluation system that allows for remote code execution.

Mar 11, 2026, CISA KEV

fastmcp: SSRF & path traversal vulnerability (critical)

Fixed in 3.2.0.

Mar 31, 2026, GitHub Advisory Database

mlflow: command injection when serving models with enable_mlserver=True (critical)

Fixed in 3.9.0.

Mar 31, 2026, GitHub Advisory Database

mlflow: MLflow command injection vulnerability (critical)

Fixed in 3.8.1.

Mar 30, 2026, GitHub Advisory Database

mlflow: MLFlow path traversal vulnerability (critical)

Mar 30, 2026, GitHub Advisory Database

handlebars: JavaScript injection via AST type confusion (critical)

Fixed in 4.7.9.

Mar 27, 2026, GitHub Advisory Database

n8n: prototype pollution in XML and GSuiteAdmin node parameters lead to RCE (critical)

Fixed in 2.14.1 and 2.13.3.

Mar 26, 2026, GitHub Advisory Database

langflow: authenticated code execution in Agentic Assistant validation (critical)

Fixed in 1.9.0.

Mar 26, 2026, GitHub Advisory Database

n8n: multiple remote code execution vulnerabilities in Merge node AlaSQL SQL… (critical)

Fixed in 2.14.1 and 2.13.3.

Mar 25, 2026, GitHub Advisory Database

litellm: two LiteLLM versions published containing credential harvesting malware (critical)

Mar 25, 2026, GitHub Advisory Database

langflow: arbitrary file write (RCE) via v2 API (critical)

Fixed in 1.9.0.

Mar 19, 2026, GitHub Advisory Database

jspdf: HTML injection in New Window paths (critical)

Fixed in 4.2.1.

Mar 17, 2026, GitHub Advisory Database

authlib: signature verification bypass (critical)

Fixed in 1.6.9.

Mar 16, 2026, GitHub Advisory Database

simple-git: blockUnsafeOperationsPlugin bypass (critical)

Fixed in 3.32.3.

Mar 10, 2026, GitHub Advisory Database

Ruby 3.2 reached end of life

No more security fixes. Latest: Ruby 4.0.

Mar 31, 2026, endoflife.date

Laravel 11 reached end of life

No more security fixes. Latest: Laravel 13.

Mar 12, 2026, endoflife.date

Laravel 13 released

Latest version: 13.37.0.

Mar 17, 2026, endoflife.date