See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Improper Privilege ManagementCVE-2026-57995
Affects phpmyfaq/phpmyfaq | Versions <4.1.5
Has fix
ComposerPublished 1 Jul 2026
- H
Improper Privilege ManagementCVE-2026-57995
Affects thorsten/phpmyfaq | Versions <4.1.5
Has fix
ComposerPublished 1 Jul 2026
- M
Race ConditionCVE-2026-55219
Affects paymenter/paymenter | Versions <1.5.5
Has fix
ComposerPublished 1 Jul 2026
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-47198
Affects paymenter/paymenter | Versions <1.5.1
Has fix
ComposerPublished 1 Jul 2026
- L
Authorization Bypass Through User-Controlled KeyCVE-2026-8347
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 30 Jun 2026
- L
Cross-site Request Forgery (CSRF)CVE-2026-8340
Affects concrete5/concrete5 | Versions <9.5.1
Has fix
ComposerPublished 30 Jun 2026
- L
Cross-site Scripting (XSS)CVE-2026-8353
Affects concrete5/concrete5 | Versions >=9.0.0RC.1, <9.5.1
Has fix
ComposerPublished 30 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2026-57958
Affects inovector/mixpost | Versions >=0.0.0
Has fix
ComposerPublished 29 Jun 2026
- H
Cross-site Scripting (XSS)CVE-2026-54087
Affects easycorp/easyadmin-bundle | Versions >=5.0.0, <5.0.13
Has fix
ComposerPublished 28 Jun 2026
Affects easycorp/easyadmin-bundle | Versions >=4.0.0, <4.29.10>=5.0.0, <5.0.10
Has fix
ComposerPublished 28 Jun 2026
- H
Missing AuthorizationCVE-2026-57518
Affects pagekit/pagekit | Versions >=0.0.0
Has fix
ComposerPublished 27 Jun 2026
- H
Race ConditionCVE-2026-47741
Affects shopper/cart | Versions <2.8.0
Has fix
ComposerPublished 27 Jun 2026
- H
Race ConditionCVE-2026-47741
Affects shopper/framework | Versions <2.8.0
Has fix
ComposerPublished 27 Jun 2026
- H
Arbitrary File UploadCVE-2026-39292
Affects hansschouten/phpagebuilder | Versions >=0.31.0
Has fix
ComposerPublished 27 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2020-37256
Affects getgrav/grav | Versions <1.6.30
Has fix
ComposerPublished 27 Jun 2026
- H
Improper Handling of Unexpected Data TypeCVE-2026-47110
Affects ueberdosis/tiptap-php | Versions <2.1.1
Has fix
ComposerPublished 27 Jun 2026
- H
Open RedirectCVE-2026-54588
Affects poweradmin/poweradmin | Versions <4.2.4>=4.3.0, <4.3.3
Has fix
ComposerPublished 27 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-50888
Affects koillection/koillection | Versions >=1.8.0
Has fix
ComposerPublished 27 Jun 2026
- M
Authorization Bypass Through User-Controlled KeyCVE-2026-12204
Affects shopxo/shopxo | Versions >=6.7.0
Has fix
ComposerPublished 27 Jun 2026
- H
Cross-site Request Forgery (CSRF)CVE-2026-55741
Affects cotonti/cotonti | Versions >=1.0.0
Has fix
ComposerPublished 27 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-50552
Affects phanan/koel | Versions <9.7.1
Has fix
ComposerPublished 27 Jun 2026
- H
Weak Password Recovery Mechanism for Forgotten PasswordCVE-2026-50635
Affects limesurvey/limesurvey | Versions <7.0.1
Has fix
ComposerPublished 27 Jun 2026
- H
SQL InjectionCVE-2026-50636
Affects limesurvey/limesurvey | Versions <7.0.1
Has fix
ComposerPublished 27 Jun 2026
- C
Arbitrary Code InjectionCVE-2026-52778
Affects yeswiki/yeswiki | Versions <4.6.6
Has fix
ComposerPublished 27 Jun 2026
- M
Command InjectionCVE-2026-10273
Affects php-censor/php-censor | Versions >=2.1.0
Has fix
ComposerPublished 27 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-48555
Affects spatie/laravel-medialibrary | Versions <11.23.0
Has fix
ComposerPublished 27 Jun 2026
- H
Incomplete List of Disallowed InputsCVE-2026-48557
Affects spatie/laravel-medialibrary | Versions <11.23.0
Has fix
ComposerPublished 27 Jun 2026
- H
Improper AuthorizationCVE-2026-47740
Affects shopper/framework | Versions <2.8.0
Has fix
ComposerPublished 27 Jun 2026
- M
Directory TraversalCVE-2026-12198
Affects microweber/microweber | Versions >=2.0.0
Has fix
ComposerPublished 27 Jun 2026
- M
Incorrect AuthorizationCVE-2026-54244
Affects statamic/cms | Versions <5.74.0>=6.0.0, <6.20.3
Has fix
ComposerPublished 27 Jun 2026