See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- L
Server-side Request Forgery (SSRF)CVE-2026-54242
Affects statamic/cms | Versions <5.73.24>=6.0.0, <6.20.1
Has fix
ComposerPublished 27 Jun 2026
- M
CSV InjectionCVE-2026-54243
Affects statamic/cms | Versions <5.73.24>=6.0.0, <6.20.1
Has fix
ComposerPublished 27 Jun 2026
- M
Incorrect AuthorizationCVE-2026-49288
Affects statamic/cms | Versions <5.73.23>=6.0.0, <6.20.0
Has fix
ComposerPublished 27 Jun 2026
- L
Server-side Request Forgery (SSRF)CVE-2026-49262
Affects aimeos/pagible | Versions <0.10.4
Has fix
ComposerPublished 27 Jun 2026
- H
Unlock of a Resource that is not LockedCVE-2026-56396
Affects thorsten/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
- H
Unlock of a Resource that is not LockedCVE-2026-56396
Affects phpmyfaq/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
Affects pterodactyl/panel | Versions <1.12.3
Has fix
ComposerPublished 27 Jun 2026
- H
HTTP Request SmugglingCVE-2026-48979
Affects php-standard-library/h2 | Versions >=6.1.0, <6.1.2>=6.2.0, <6.2.1
Has fix
ComposerPublished 27 Jun 2026
- H
HTTP Request SmugglingCVE-2026-48979
Affects php-standard-library/php-standard-library | Versions >=6.1.0, <6.1.2>=6.2.0, <6.2.1
Has fix
ComposerPublished 27 Jun 2026
Affects web-auth/webauthn-symfony-bundle | Versions <5.3.4
Has fix
ComposerPublished 27 Jun 2026
- H
Missing AuthorizationCVE-2026-55483
Affects snipe/snipe-it | Versions <8.6.0
Has fix
ComposerPublished 27 Jun 2026
- M
Missing AuthorizationCVE-2026-55542
Affects snipe/snipe-it | Versions <8.5.1
Has fix
ComposerPublished 27 Jun 2026
- M
Improper AuthorizationCVE-2026-55519
Affects snipe/snipe-it | Versions <8.4.1
Has fix
ComposerPublished 27 Jun 2026
- M
Missing AuthorizationCVE-2026-50550
Affects snipe/snipe-it | Versions <8.5.0
Has fix
ComposerPublished 27 Jun 2026
- M
Authorization Bypass Through User-Controlled KeyCVE-2026-55482
Affects snipe/snipe-it | Versions <8.4.2
Has fix
ComposerPublished 27 Jun 2026
- H
Incorrect AuthorizationCVE-2026-48507
Affects snipe/snipe-it | Versions <8.6.0
Has fix
ComposerPublished 27 Jun 2026
- H
Missing AuthorizationCVE-2026-48492
Affects snipe/snipe-it | Versions <8.5.1
Has fix
ComposerPublished 27 Jun 2026
- M
Allocation of Resources Without Limits or ThrottlingCVE-2026-49870
Affects snipe/snipe-it | Versions <8.6.0
Has fix
ComposerPublished 27 Jun 2026
- H
Missing AuthorizationCVE-2026-49205
Affects thorsten/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
- H
Missing AuthorizationCVE-2026-49205
Affects phpmyfaq/phpmyfaq | Versions <4.1.4
Has fix
ComposerPublished 27 Jun 2026
- H
Incorrect AuthorizationCVE-2026-48493
Affects snipe/snipe-it | Versions <8.6.0
Has fix
ComposerPublished 27 Jun 2026
- H
Missing AuthorizationCVE-2026-49976
Affects snipe/snipe-it | Versions <8.6.0
Has fix
ComposerPublished 27 Jun 2026
- H
Improper AuthenticationCVE-2026-52793
Affects froxlor/froxlor | Versions <2.3.7
Has fix
ComposerPublished 27 Jun 2026
- M
Missing AuthorizationCVE-2026-8239
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
- L
Cross-site Request Forgery (CSRF)CVE-2026-8414
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
- L
Cross-site Request Forgery (CSRF)CVE-2026-8432
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
- L
Cross-site Scripting (XSS)CVE-2026-8139
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026
- L
Cross-site Request Forgery (CSRF)CVE-2026-8410
Affects concrete5/concrete5 | Versions >=9.0.0RC1, <9.5.1
Has fix
ComposerPublished 27 Jun 2026
- M
Access Control BypassCVE-2026-8240
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 27 Jun 2026