See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Deserialization of Untrusted DataCVE-2026-44795
Affects io.spinnaker.kork:kork-secrets | Versions [,2025.3.3)[2025.4.0,2025.4.4)[2026.0.0,2026.0.3)
Has fix
MavenPublished 23 Jun 2026
- M
Deserialization of Untrusted DataCVE-2026-44795
Affects io.spinnaker.orca:orca-clouddriver | Versions [,2025.3.3)[2025.4.0,2025.4.4)[2026.0.0,2026.0.3)
Has fix
MavenPublished 23 Jun 2026
- M
Deserialization of Untrusted DataCVE-2026-44795
Affects io.spinnaker.rosco:rosco-manifests | Versions [,2025.3.3)[2025.4.0,2025.4.4)[2026.0.0,2026.0.3)
Has fix
MavenPublished 23 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-46495
Affects org.openidentityplatform.opendj:opendj-server-legacy | Versions [,5.1.1)
Has fix
MavenPublished 23 Jun 2026
- M
Uncaught ExceptionCVE-2026-12644
Affects org.webjars.npm:ts-deepmerge | Versions [0,]
Has fix
MavenPublished 23 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2026-55847
Affects io.qameta.allure:allure-generator | Versions [,2.39.0)
Has fix
MavenPublished 22 Jun 2026
- M
Incorrect AuthorizationCVE-2026-32967
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [,3.4.2)
Has fix
MavenPublished 22 Jun 2026
- M
Incorrect AuthorizationCVE-2026-41280
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [,3.4.2)
Has fix
MavenPublished 22 Jun 2026
- H
Incorrect AuthorizationCVE-2026-32966
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [,3.4.2)
Has fix
MavenPublished 22 Jun 2026
- H
Incorrect AuthorizationCVE-2026-42357
Affects org.apache.dolphinscheduler:dolphinscheduler-api | Versions [,3.4.2)
Has fix
MavenPublished 22 Jun 2026
- H
Key Exchange without Entity AuthenticationCVE-2026-11745
Affects com.linecorp.centraldogma:centraldogma-server-mirror-git | Versions [,0.84.0)
Has fix
MavenPublished 22 Jun 2026
- C
Use of Hard-coded CredentialsCVE-2026-11746
Affects com.linecorp.centraldogma:centraldogma-server | Versions [,0.84.0)
Has fix
MavenPublished 22 Jun 2026
- M
LDAP InjectionCVE-2026-11748
Affects com.linecorp.centraldogma:centraldogma-server-auth-shiro | Versions [,0.84.0)
Has fix
MavenPublished 22 Jun 2026
- M
Improper InitializationCVE-2026-65898
Affects org.webjars.npm:dompurify | Versions [,3.4.11)
Has fix
MavenPublished 22 Jun 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-56740
Affects org.jline:jline-remote-telnet | Versions [,4.2.1)
Has fix
MavenPublished 21 Jun 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-56741
Affects org.jline:jline-remote-telnet | Versions [,3.30.14)[4.0.0,4.0.16)[4.1.0,4.2.1)
Has fix
MavenPublished 21 Jun 2026
- M
External Control of File Name or PathCVE-2026-11752
Affects com.linecorp.armeria:armeria-xds | Versions [1.37.0,1.40.0)
Has fix
MavenPublished 21 Jun 2026
- H
LDAP InjectionCVE-2026-49268
Affects org.apache.shiro:shiro-core | Versions [,2.2.1)
Has fix
MavenPublished 19 Jun 2026
Affects org.webjars.npm:nodemailer | Versions [0,]
Has fix
MavenPublished 18 Jun 2026
- M
Prototype PollutionCVE-2026-55886
Affects org.webjars.npm:jodit | Versions [0,]
Has fix
MavenPublished 18 Jun 2026
- H
Regular Expression Denial of Service (ReDoS)CVE-2026-55470
Affects ca.uhn.hapi.fhir:org.hl7.fhir.dstu2 | Versions [,6.9.10)
Has fix
MavenPublished 18 Jun 2026
- H
Path EquivalenceCVE-2026-50559
Affects io.quarkus:quarkus-vertx-http | Versions [,3.20.6.2)[3.21.0.CR1,3.27.4.1)[3.28.0.CR1,3.33.2.1)[3.34.0.CR1,3.36.3)[3.37.0.CR1,3.37.0)
Has fix
MavenPublished 18 Jun 2026
- H
Path EquivalenceCVE-2026-50559
Affects io.quarkus:quarkus-undertow | Versions [,3.20.6.2)[3.21.0.CR1,3.27.4.1)[3.28.0.CR1,3.33.2.1)[3.34.0.CR1,3.36.3)[3.37.0.CR1,3.37.0)
Has fix
MavenPublished 18 Jun 2026
- H
Path EquivalenceCVE-2026-50559
Affects io.quarkus:quarkus-rest-csrf | Versions [,3.20.6.2)[3.21.0.CR1,3.27.4.1)[3.28.0.CR1,3.33.2.1)[3.34.0.CR1,3.36.3)[3.37.0.CR1,3.37.0)
Has fix
MavenPublished 18 Jun 2026
- H
Path EquivalenceCVE-2026-50559
Affects io.quarkus:quarkus-oidc | Versions [,3.20.6.2)[3.21.0.CR1,3.27.4.1)[3.28.0.CR1,3.33.2.1)[3.34.0.CR1,3.36.3)[3.37.0.CR1,3.37.0)
Has fix
MavenPublished 18 Jun 2026
- H
Path EquivalenceCVE-2026-50559
Affects io.quarkus:quarkus-keycloak-authorization | Versions [,3.20.6.2)[3.21.0.CR1,3.27.4.1)[3.28.0.CR1,3.33.2.1)[3.34.0.CR1,3.36.3)[3.37.0.CR1,3.37.0)
Has fix
MavenPublished 18 Jun 2026
- M
Partial String ComparisonCVE-2026-55602
Affects org.webjars.npm:http-proxy-middleware | Versions [0,]
Has fix
MavenPublished 18 Jun 2026
- H
Origin Validation ErrorCVE-2026-6734
Affects org.webjars.npm:undici | Versions [7.27.1,]
Has fix
MavenPublished 18 Jun 2026
- H
Use of Cache Containing Sensitive InformationCVE-2026-9678
Affects org.webjars.npm:undici | Versions [7.12.0,]
Has fix
MavenPublished 18 Jun 2026
- M
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2026-6733
Affects org.webjars.npm:undici | Versions [0,]
Has fix
MavenPublished 18 Jun 2026