StackPrism

Monthly report

What your agent missed in June 2026

In June 2026, CISA added 1 actively exploited vulnerability in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 10 critical advisories for widely used npm and PyPI packages, 3 release lines reached end of life and 1 new release line shipped.

  • 1Exploited in the wild
  • 10Critical advisories
  • 3Reached end of life
  • 1New release lines

The ones to know first

The most widely used software among this month’s items, one of each kind.

  • CVE-2026-42271 added to CISA’s exploited list (LiteLLM)

    BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run…

    , CISA KEV

  • langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit (critical)

    Fixed in 1.9.2.

    , GitHub Advisory Database

  • Amazon Linux 2 reached end of life

    No more security fixes. Latest: Amazon Linux 2023.

    , endoflife.date

Everything in June 2026

Exploited in the wild1

  • CVE-2026-42271 added to CISA’s exploited list (LiteLLM)

    BerriAI LiteLLM contains a command injection vulnerability that could allow any authenticated user, including holders of low-privilege internal-user keys, to run…

    , CISA KEV

Critical advisories10

  • chainlit: session hijacking vulnerability (critical)

    Fixed in 2.10.1.

    , GitHub Advisory Database

  • langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit (critical)

    Fixed in 1.9.2.

    , GitHub Advisory Database

  • jupyter-server: stored XSS in NbconvertFileHandler / NbconvertPostHandler (critical)

    Fixed in 2.20.0.

    , GitHub Advisory Database

  • langflow: unauthenticated file upload (critical)

    Fixed in 1.9.1.

    , GitHub Advisory Database

  • litellm: authentication bypass via host header injection (critical)

    Fixed in 1.84.0.

    , GitHub Advisory Database

  • vllm: OpenAI auth bypass (critical)

    Fixed in 0.22.0.

    , GitHub Advisory Database

  • langflow: unauthenticated RCE in Shareable Playgrounds (critical)

    Fixed in 1.9.2.

    , GitHub Advisory Database

  • electron: Buffer performs incorrect byte length calculations resulting in heap… (critical)

    Fixed in 42.3.3.

    , GitHub Advisory Database

  • mlflow: environment variable injection in AI gateway secrets enables… (critical)

    Fixed in 3.11.0.

    , GitHub Advisory Database

  • vitest: arbitrary file can be read and executed (critical)

    Fixed in 4.1.0 and 3.2.6.

    , GitHub Advisory Database

Reached end of life3

  • Amazon Linux 2 reached end of life

    No more security fixes. Latest: Amazon Linux 2023.

    , endoflife.date

  • Spring Boot 3.5 reached end of life

    No more security fixes. Latest: Spring Boot 4.1.

    , endoflife.date

  • Kubernetes 1.33 reached end of life

    No more security fixes. Latest: Kubernetes 1.37.

    , endoflife.date

New release lines1

Which models can’t know this

These models have a knowledge cutoff before June 2026, so none of them knows about any of this unless a tool gives it live data.

Anthropic

xAI

OpenAI

Google

Microsoft

Meta

Claude Fable 5.1, Claude Opus 5.5, Claude Sonnet 5.5, Claude Haiku 5.5 have cutoffs in or after June 2026, so they may know some of it.

Last checked against CISA KEV, GitHub Advisory Database and endoflife.date.

What counts: vulnerabilities CISA confirms are exploited, in software web apps commonly run; critical GitHub advisories on widely used npm and PyPI packages; and release lines of popular runtimes, frameworks and databases reaching end of life or shipping. Also as Markdown.