See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- C
Deserialization of Untrusted DataCVE-2026-52777
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- H
SQL InjectionCVE-2026-52771
Affects yeswiki/yeswiki | Versions >=4.2.0, <4.6.6
Has fix
ComposerPublished 9 Jul 2026
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-52769
Affects yeswiki/yeswiki | Versions >=4.6.2, <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- H
Missing AuthorizationCVE-2026-52766
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- H
SQL InjectionCVE-2026-52775
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-52774
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-52773
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- H
Improper Validation of Specified Type of InputCVE-2026-52763
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
- M
Improper Encoding or Escaping of OutputCVE-2026-52772
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 9 Jul 2026
Affects craftcms/cms | Versions >=4.0.0-RC1, <4.17.7>=5.0.0-RC1, <5.9.13
Has fix
ComposerPublished 9 Jul 2026
- M
Cross-site Request Forgery (CSRF)CVE-2026-53760
Affects admidio/admidio | Versions >=0.0.0
Has fix
ComposerPublished 9 Jul 2026
Affects craftcms/cms | Versions >=5.5.0, <5.9.14
Has fix
ComposerPublished 9 Jul 2026
- H
Directory TraversalCVE-2026-59948
Affects composer/composer | Versions <2.2.29>=2.3.0-RC1, <2.10.2
Has fix
ComposerPublished 9 Jul 2026
- M
Insertion of Sensitive Information into Log FileCVE-2026-59947
Affects composer/composer | Versions <2.2.29>=2.3.0-RC1, <2.10.2
Has fix
ComposerPublished 9 Jul 2026
- H
Directory TraversalCVE-2026-59946
Affects composer/composer | Versions <2.2.29>=2.3.0-RC1, <2.10.2
Has fix
ComposerPublished 9 Jul 2026
- H
Command InjectionCVE-2026-60102
Affects horde/vfs | Versions <3.0.1
Has fix
ComposerPublished 8 Jul 2026
- L
Interpretation ConflictCVE-2026-59882
Affects guzzlehttp/psr7 | Versions <2.12.3
Has fix
ComposerPublished 8 Jul 2026
- L
Origin Validation ErrorCVE-2026-59883
Affects guzzlehttp/guzzle | Versions <7.12.3
Has fix
ComposerPublished 8 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-58657
Affects getgrav/grav | Versions >=2.0.0-rc.9, <2.0.0
Has fix
ComposerPublished 8 Jul 2026
Affects web-auth/webauthn-lib | Versions >=4.9.0, <5.3.5
Has fix
ComposerPublished 8 Jul 2026
- L
External Control of File Name or PathCVE-2026-49358
Affects pontedilana/php-weasyprint | Versions <2.6.0
Has fix
ComposerPublished 7 Jul 2026
- C
Authorization Bypass Through User-Controlled KeyCVE-2026-27823
Affects egroupware/egroupware | Versions <23.1.20260224>=26.0.20251208, <26.2.20260224
Has fix
ComposerPublished 7 Jul 2026
- H
Eval InjectionCVE-2026-40187
Affects egroupware/egroupware | Versions <23.1.20260601>=26.0.20251208, <26.4.20260413
Has fix
ComposerPublished 7 Jul 2026
- H
External Control of File Name or PathCVE-2026-45016
Affects egroupware/egroupware | Versions <23.1.20260601>=26.0.20251208, <26.5.20260507
Has fix
ComposerPublished 7 Jul 2026
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-59712
Affects leantime/leantime | Versions <3.9.6
Has fix
ComposerPublished 6 Jul 2026
- H
Cross-site Request Forgery (CSRF)CVE-2026-59713
Affects leantime/leantime | Versions <3.8.0
Has fix
ComposerPublished 6 Jul 2026
- H
Arbitrary Code InjectionCVE-2026-55794
Affects craftcms/cms | Versions >=5.9.0, <5.10.0
Has fix
ComposerPublished 6 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-55793
Affects craftcms/cms | Versions >=5.0.0-RC1, <5.9.22
Has fix
ComposerPublished 6 Jul 2026
- H
Cross-site Scripting (XSS)CVE-2026-55790
Affects craftcms/cms | Versions >=4.0.0-RC1, <4.17.15>=5.0.0-RC1, <5.9.22
Has fix
ComposerPublished 6 Jul 2026