StackPrism

Monthly report

What your agent missed in May 2026

In May 2026, CISA added 5 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 8 critical advisories for widely used npm and PyPI packages, 1 release line reached end of life and 1 new release line shipped.

  • 5Exploited in the wild
  • 8Critical advisories
  • 1Reached end of life
  • 1New release lines

The ones to know first

The most widely used software among this month’s items, one of each kind.

  • CVE-2026-45321 added to CISA’s exploited list (TanStack)

    TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware…

    , CISA KEV

  • mlflow: unauthorized access to multipart upload endpoints (critical)

    Fixed in 3.10.0.

    , GitHub Advisory Database

  • Angular 19 reached end of life

    No more security fixes. Latest: Angular 22.

    , endoflife.date

Everything in May 2026

Exploited in the wild5

  • CVE-2026-48027 added to CISA’s exploited list (Nx Console)

    Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published.

    , CISA KEV

  • CVE-2026-45321 added to CISA’s exploited list (TanStack)

    TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware…

    , CISA KEV

  • CVE-2026-9082 added to CISA’s exploited list (Drupal)

    Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the…

    , CISA KEV

  • CVE-2025-34291 added to CISA’s exploited list (Langflow)

    Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as…

    , CISA KEV

  • CVE-2026-42208 added to CISA’s exploited list (LiteLLM)

    BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized…

    , CISA KEV

Critical advisories8

  • mlflow: unauthorized access to multipart upload endpoints (critical)

    Fixed in 3.10.0.

    , GitHub Advisory Database

  • mlflow: improper origin validation in MLflow Assistant /ajax-api endpoints… (critical)

    Fixed in 3.10.0.

    , GitHub Advisory Database

  • sanitize-html: Apostrophe has default XSS via xmp raw-text passthrough in sanitize-html (critical)

    Fixed in 2.17.4.

    , GitHub Advisory Database

  • n8n: XML node prototype pollution patch bypass (critical)

    Fixed in 1.123.43 and 2.22.1.

    , GitHub Advisory Database

  • n8n: arbitrary file read via Git node (critical)

    Fixed in 1.123.43 and 2.22.1.

    , GitHub Advisory Database

  • n8n: HTTP request node pagination prototype pollution to RCE (critical)

    Fixed in 1.123.43 and 2.22.1.

    , GitHub Advisory Database

  • @strapi/strapi: Strapi may leak sensitive data (critical)

    Fixed in 5.37.0.

    , GitHub Advisory Database

  • langflow: Langflow Knowledge Bases API is Vulnerable to path traversal (critical)

    Fixed in 1.9.0.

    , GitHub Advisory Database

Reached end of life1

  • Angular 19 reached end of life

    No more security fixes. Latest: Angular 22.

    , endoflife.date

New release lines1

  • Node.js 26 released

    Becomes LTS on Oct 28, 2026.

    , endoflife.date

Which models can’t know this

These models have a knowledge cutoff before May 2026, so none of them knows about any of this unless a tool gives it live data.

OpenAI

Google

Anthropic

xAI

Microsoft

Meta

Claude Fable 5.1, Claude Opus 5.5, Claude Sonnet 5.5, Claude Haiku 5.5, Claude Opus 5, GPT-6 Luna, Grok 4.7 have cutoffs in or after May 2026, so they may know some of it.

Last checked against CISA KEV, GitHub Advisory Database and endoflife.date.

What counts: vulnerabilities CISA confirms are exploited, in software web apps commonly run; critical GitHub advisories on widely used npm and PyPI packages; and release lines of popular runtimes, frameworks and databases reaching end of life or shipping. Also as Markdown.