# What your agent missed in May 2026

In May 2026, CISA added 5 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 8 critical advisories for widely used npm and PyPI packages, 1 release line reached end of life and 1 new release line shipped.

The ones to know first:

- **May 27, 2026**: CVE-2026-45321 added to CISA’s exploited list (TanStack). TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45321)
- **May 26, 2026**: mlflow: unauthorized access to multipart upload endpoints (critical). Fixed in 3.10.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-8c7q-86fq-vvmh)
- **May 19, 2026**: Angular 19 reached end of life. No more security fixes. Latest: Angular 22. [endoflife.date](https://endoflife.date/angular)

## Exploited in the wild (5)

- **May 27, 2026**: CVE-2026-48027 added to CISA’s exploited list (Nx Console). Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48027)
- **May 27, 2026**: CVE-2026-45321 added to CISA’s exploited list (TanStack). TanStack contains an unspecified vulnerability that allowed malicious versions of the product to be published to the npm registry to publish credential-stealing malware… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-45321)
- **May 22, 2026**: CVE-2026-9082 added to CISA’s exploited list (Drupal). Drupal Core contains a SQL injection vulnerability that could allow for privilege escalation and remote code execution via specially crafted requests sent with the… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-9082)
- **May 21, 2026**: CVE-2025-34291 added to CISA’s exploited list (Langflow). Langflow contains an origin validation error vulnerability in which an overly permissive CORS configuration combined with a refresh token cookie configured as… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-34291)
- **May 8, 2026**: CVE-2026-42208 added to CISA’s exploited list (LiteLLM). BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read data from the proxy's database and potentially modify it, leading to unauthorized… [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-42208)

## Critical advisories (8)

- **May 26, 2026**: mlflow: unauthorized access to multipart upload endpoints (critical). Fixed in 3.10.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-8c7q-86fq-vvmh)
- **May 19, 2026**: mlflow: improper origin validation in MLflow Assistant /ajax-api endpoints… (critical). Fixed in 3.10.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-67c5-x5mf-rppq)
- **May 14, 2026**: sanitize-html: Apostrophe has default XSS via xmp raw-text passthrough in sanitize-html (critical). Fixed in 2.17.4. [GitHub Advisory Database](https://github.com/advisories/GHSA-rpr9-rxv7-x643)
- **May 14, 2026**: n8n: XML node prototype pollution patch bypass (critical). Fixed in 1.123.43 and 2.22.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-wrwr-h859-xh2r)
- **May 14, 2026**: n8n: arbitrary file read via Git node (critical). Fixed in 1.123.43 and 2.22.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-57g9-58c2-xjg3)
- **May 14, 2026**: n8n: HTTP request node pagination prototype pollution to RCE (critical). Fixed in 1.123.43 and 2.22.1. [GitHub Advisory Database](https://github.com/advisories/GHSA-c8xv-5998-g76h)
- **May 14, 2026**: @strapi/strapi: Strapi may leak sensitive data (critical). Fixed in 5.37.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-rjg2-95x7-8qmx)
- **May 5, 2026**: langflow: Langflow Knowledge Bases API is Vulnerable to path traversal (critical). Fixed in 1.9.0. [GitHub Advisory Database](https://github.com/advisories/GHSA-9whx-c884-c68q)

## Reached end of life (1)

- **May 19, 2026**: Angular 19 reached end of life. No more security fixes. Latest: Angular 22. [endoflife.date](https://endoflife.date/angular)

## New release lines (1)

- **May 5, 2026**: Node.js 26 released. Becomes LTS on Oct 28, 2026. [endoflife.date](https://endoflife.date/nodejs)

## Which models can’t know this

Every model below has a knowledge cutoff before May 2026, so it can’t know about any of this unless a tool gives it live data.

- GPT-6 Astra (OpenAI): April 30, 2026
- GPT-6.1 Sol (OpenAI): April 30, 2026
- GPT-6 Sol (OpenAI): April 20, 2026
- Gemini 3.8 Flash (Google): March 2026
- Gemini 4 Argon (Google): March 2026
- GPT-5.6 Sol (OpenAI): February 16, 2026
- Claude Fable 5 (Anthropic): January 2026
- Claude Opus 4.7 (Anthropic): January 2026
- Claude Opus 4.8 (Anthropic): January 2026
- Claude Sonnet 5 (Anthropic): January 2026
- Grok 4.6 (xAI): January 2026
- MAI-Code-1.1-Flash (Microsoft): December 2025
- GPT-5.5 (OpenAI): December 1, 2025
- Claude Sonnet 4.6 (Anthropic): August 2025
- GPT-5.3-Codex (OpenAI): August 31, 2025
- GPT-5.4 (OpenAI): August 31, 2025
- GPT-5.4 Mini (OpenAI): August 31, 2025
- Claude Opus 4.5 (Anthropic): May 2025
- Claude Opus 4.6 (Anthropic): May 2025
- Claude Haiku 4.5 (Anthropic): February 2025
- Claude Sonnet 4.5 (Anthropic): January 2025
- Gemini 2.5 Flash (Google): January 2025
- Gemini 2.5 Pro (Google): January 2025
- Gemini 3 Flash (Google): January 2025
- Gemini 3.1 Pro (Google): January 2025
- GPT-5 (OpenAI): September 30, 2024
- GPT-5-Codex (OpenAI): September 30, 2024
- GPT-5.1 (OpenAI): September 30, 2024
- Llama 4 Maverick (Meta): August 2024
- GPT-4.1 (OpenAI): June 1, 2024
- o3 (OpenAI): June 1, 2024
- GPT-5 Mini (OpenAI): May 31, 2024
- GPT-4o (OpenAI): October 1, 2023

---

Checked Oct 17, 2026 against [CISA KEV](https://www.cisa.gov/known-exploited-vulnerabilities-catalog), [GitHub Advisory Database](https://github.com/advisories) and [endoflife.date](https://endoflife.date). Full report: https://stackprism.ai/reports/2026-05