See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects poweradmin/poweradmin | Versions >=4.1.0, <4.2.5>=4.3.0, <4.3.4
Has fix
ComposerPublished 25 Jul 2026
- H
Infinite loopCVE-2026-59933
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-59931
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
Affects phpoffice/phpspreadsheet | Versions <1.30.6>=2.0.0, <2.1.18>=2.2.0, <2.4.7>=3.3.0, <3.10.7>=4.0.0, <5.8.1
Has fix
ComposerPublished 25 Jul 2026
- M
Denial of Service (DoS)CVE-2026-59941
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-59942
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
- M
Information ExposureCVE-2026-59943
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
- M
Directory TraversalCVE-2026-56722
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
- M
Directory TraversalCVE-2026-55554
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
- M
Information ExposureCVE-2026-55555
Affects dompdf/dompdf | Versions <3.1.6
Has fix
ComposerPublished 25 Jul 2026
Affects getgrav/grav | Versions >=1.7.0, <2.0.9
Has fix
ComposerPublished 25 Jul 2026
- C
Arbitrary Code InjectionCVE-2026-65008
Affects getgrav/grav | Versions <2.0.7
Has fix
ComposerPublished 25 Jul 2026
- M
Incorrect Implementation of Authentication AlgorithmCVE-2026-57852
Affects getgrav/grav | Versions <2.0.9
Has fix
ComposerPublished 25 Jul 2026
- M
Improperly Controlled Sequential Memory AllocationCVE-2026-67353
Affects guzzlehttp/guzzle | Versions <7.15.1
Has fix
ComposerPublished 25 Jul 2026
Affects guzzlehttp/guzzle | Versions <7.15.1
Has fix
ComposerPublished 25 Jul 2026
- M
Insufficiently Protected CredentialsCVE-2026-67339
Affects guzzlehttp/guzzle | Versions <7.14.2
Has fix
ComposerPublished 25 Jul 2026
- H
Directory TraversalCVE-2026-65694
Affects microweber/microweber | Versions >=0.0.0
Has fix
ComposerPublished 25 Jul 2026
- M
Allocation of Resources Without Limits or ThrottlingCVE-2026-65650
Affects elgg/elgg | Versions <7.0.0
Has fix
ComposerPublished 25 Jul 2026
- H
HTTP Response SplittingCVE-2026-63771
Affects vrana/adminer | Versions >=4.6.0, <5.4.3
Has fix
ComposerPublished 25 Jul 2026
- C
Remote Code Execution (RCE)CVE-2026-63030
Affects johnpbloch/wordpress-core | Versions >=6.9.0, <6.9.5>=7.0.0, <7.0.2
Has fix
ComposerPublished 21 Jul 2026
- H
SQL InjectionCVE-2026-60137
Affects johnpbloch/wordpress-core | Versions >=6.8.0, <6.8.6>=6.9.0, <6.9.5>=7.0.0, <7.0.2
Has fix
ComposerPublished 21 Jul 2026
- H
Command InjectionCVE-2026-55578
Affects pheditor/pheditor | Versions >=2.0.1, <2.0.6
Has fix
ComposerPublished 19 Jul 2026
- H
Command InjectionCVE-2026-54540
Affects pheditor/pheditor | Versions <2.0.5
Has fix
ComposerPublished 19 Jul 2026
- C
Use of Hard-coded CredentialsCVE-2026-55579
Affects pheditor/pheditor | Versions >=2.0.1, <2.0.6
Has fix
ComposerPublished 19 Jul 2026
- C
Missing AuthorizationCVE-2026-62232
Affects getgrav/grav | Versions >=2.0.3, <2.0.4
Has fix
ComposerPublished 19 Jul 2026
- H
Improper Handling of Case SensitivityCVE-2026-62230
Affects getgrav/grav | Versions <2.0.4
Has fix
ComposerPublished 19 Jul 2026
- H
Regular Expression Denial of Service (ReDoS)CVE-2026-62237
Affects getgrav/grav | Versions <2.0.4
Has fix
ComposerPublished 19 Jul 2026
Affects adawolfa/isdoc | Versions <1.4.3>=1.5.0, <1.5.1>=1.6.0, <1.6.1
Has fix
ComposerPublished 16 Jul 2026