StackPrism

Monthly report

What your agent missed in August 2026

In August 2026, CISA added 8 actively exploited vulnerabilities in web-stack software to its Known Exploited Vulnerabilities catalog, GitHub published 5 critical advisories for widely used npm and PyPI packages, 3 release lines reached end of life and 3 new release lines shipped.

  • 8Exploited in the wild
  • 5Critical advisories
  • 3Reached end of life
  • 3New release lines

The ones to know first

The most widely used software among this month’s items, one of each kind.

  • CVE-2026-34486 added to CISA’s exploited list (Apache Tomcat)

    Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor.

    , CISA KEV

  • litellm: server-side template injection in the /prompts/test endpoint (critical)

    Fixed in 1.83.7.

    , GitHub Advisory Database

  • Debian 11 reached end of life

    No more security fixes. Latest: Debian 13.

    , endoflife.date

Everything in August 2026

Exploited in the wild8

  • CVE-2026-66384 added to CISA’s exploited list (JFrog Artifactory)

    JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability.

    , CISA KEV

  • CVE-2026-60004 added to CISA’s exploited list (Gitea)

    Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an…

    , CISA KEV

  • CVE-2026-64849 added to CISA’s exploited list (MLflow)

    MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and…

    , CISA KEV

  • CVE-2025-62593 added to CISA’s exploited list (Ray)

    Ray-Project Ray contains a code injection vulnerability that could allow remote code execution.

    , CISA KEV

  • CVE-2026-72898 added to CISA’s exploited list (Metabase)

    Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can…

    , CISA KEV

  • CVE-2026-63077 added to CISA’s exploited list (TeamCity)

    JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol.

    , CISA KEV

  • CVE-2026-34486 added to CISA’s exploited list (Apache Tomcat)

    Apache Tomcat contains a missing encryption of sensitive data vulnerability that allows the bypass of the EncryptInterceptor.

    , CISA KEV

  • CVE-2026-9198 added to CISA’s exploited list (Langflow)

    Langflow contains a code injection vulnerability that allows unauthenticated attackers to achieve full remote code execution on default Langflow deployments.

    , CISA KEV

Critical advisories5

  • litellm: server-side template injection in the /prompts/test endpoint (critical)

    Fixed in 1.83.7.

    , GitHub Advisory Database

  • chainlit: command injection (critical)

    Fixed in 2.12.0.

    , GitHub Advisory Database

  • crypto-js: Insufficient Entropy in Cryptographic secret Generation (critical)

    Fixed in 4.0.0.

    , GitHub Advisory Database

  • @nuxt/devtools: unauthenticated Nuxt DevTools RPC allows arbitrary command execution on… (critical)

    Fixed in 3.3.1.

    , GitHub Advisory Database

  • sequelize: SQL injection (Oracle DB) (critical)

    Fixed in 6.37.4.

    , GitHub Advisory Database

Reached end of life3

  • Debian 11 reached end of life

    No more security fixes. Latest: Debian 13.

    , endoflife.date

  • Go 1.25 reached end of life

    No more security fixes. Latest: Go 1.27.

    , endoflife.date

  • Ruby on Rails 7.2 reached end of life

    No more security fixes. Latest: Ruby on Rails 8.1.

    , endoflife.date

New release lines3

  • Kubernetes 1.37 released

    Latest version: 1.37.1.

    , endoflife.date

  • Go 1.27 released

    Latest version: 1.27.2.

    , endoflife.date

  • Django 6.1 released

    Latest version: 6.1.2.

    , endoflife.date

Which models can’t know this

Every model in our cutoff table has a knowledge cutoff before August 2026, so none of them knows about any of this unless a tool gives it live data.

Anthropic

xAI

OpenAI

Google

Microsoft

Meta

Last checked against CISA KEV, GitHub Advisory Database and endoflife.date.

What counts: vulnerabilities CISA confirms are exploited, in software web apps commonly run; critical GitHub advisories on widely used npm and PyPI packages; and release lines of popular runtimes, frameworks and databases reaching end of life or shipping. Also as Markdown.