See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
SQL InjectionCVE-2026-63221
Affects codeigniter4/framework | Versions >=4.3.0, <4.7.4
Has fix
ComposerPublished 2 Aug 2026
- M
Authorization Bypass Through User-Controlled KeyCVE-2026-68501
Affects sylius/mollie-plugin | Versions <2.2.8>=3.0.0, <3.2.4>=3.3.0, <3.3.1
Has fix
ComposerPublished 2 Aug 2026
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-68500
Affects sylius/mollie-plugin | Versions <2.2.8>=3.0.0, <3.2.4>=3.3.0, <3.3.1
Has fix
ComposerPublished 2 Aug 2026
- H
Arbitrary File UploadCVE-2026-53599
Affects redaxo/source | Versions >=5.18.2, <5.21.1
Has fix
ComposerPublished 2 Aug 2026
- H
Improper AuthenticationCVE-2026-51953
Affects feehi/cms | Versions >=0.0.0
Has fix
ComposerPublished 2 Aug 2026
Affects simple-node-calc-ccc | Versions *
No fix available
npmPublished 1 Aug 2026
Affects utils-common-helpers | Versions *
No fix available
npmPublished 1 Aug 2026
Affects your-unique-package-name1 | Versions *
No fix available
npmPublished 1 Aug 2026
Affects vue-template-compiler-plugin | Versions =2.7.18
Has fix
npmPublished 1 Aug 2026
Affects react-context-form-tdsss | Versions *
No fix available
npmPublished 1 Aug 2026
Affects test-package-sajsdkashdj | Versions *
No fix available
npmPublished 1 Aug 2026