See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- L
Resource ExhaustionCVE-2026-56819
Affects apache-nifi-registry | Versions <2.11.0-r0
Has fix
minimos:latestPublished 4 Aug 2026
Affects grafana-profilecli-2.0 | Versions <2.0.6-r2
Has fix
minimos:latestPublished 4 Aug 2026
- L
Uncontrolled Memory AllocationCVE-2026-41178
Affects syft | Versions <1.50.0-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
HTTP Request SmugglingCVE-2026-59900
Affects apache-pulsar-4.2 | Versions <4.2.4-r0
Has fix
minimos:latestPublished 4 Aug 2026
- L
Uncontrolled Memory AllocationCVE-2026-39882
Affects rancher-machine | Versions <0.15.0.142.4-r3
Has fix
minimos:latestPublished 4 Aug 2026
- L
Loop with Unreachable Exit Condition ('Infinite Loop')CVE-2026-59901
Affects apache-nifi-registry | Versions <2.11.0-r0
Has fix
minimos:latestPublished 4 Aug 2026
Affects k8sgpt-operator | Versions <0.2.27-r3
Has fix
minimos:latestPublished 4 Aug 2026
- L
HTTP Request SmugglingCVE-2026-59898
Affects apache-pulsar-4.0 | Versions <4.0.13-r0
Has fix
minimos:latestPublished 4 Aug 2026
- L
CVE-2026-56852CVE-2026-56852
Affects prometheus-3.5 | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- L
Improper Certificate ValidationCVE-2026-39835
Affects srenix | Versions <0.1.0_alpha1-r2
Has fix
minimos:latestPublished 4 Aug 2026
- C
Insufficient Verification of Data AuthenticityCVE-2026-47691
Affects conductor-fips | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- L
Use of a Key Past its Expiration DateCVE-2026-54787
Affects kyverno-1.16 | Versions <1.16.4-r8
Has fix
minimos:latestPublished 4 Aug 2026
- L
Uncontrolled Memory AllocationCVE-2026-41178
Affects blob-csi-fips-1.27 | Versions <1.27.8-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
Uncontrolled Memory AllocationCVE-2026-41178
Affects buildpacks-lifecycle-0.21 | Versions <0.21.14-r1
Has fix
minimos:latestPublished 4 Aug 2026
Affects calico-3.31-apiserver | Versions <3.31.6-r11
Has fix
minimos:latestPublished 4 Aug 2026
- L
CVE-2026-46602CVE-2026-46602
Affects pdfcpu-0.12 | Versions <0.12.1-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
CVE-2025-61725CVE-2025-61725
Affects signoz-otel-collector | Versions <0.144.6-r1
Has fix
minimos:latestPublished 4 Aug 2026
- M
Missing Initialization of ResourceCVE-2025-54388
Affects signoz-otel-collector-fips | Versions <0.144.6-r1
Has fix
minimos:latestPublished 4 Aug 2026
- C
Improper Input ValidationCVE-2026-42579
Affects airbyte-server | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- L
Allocation of Resources Without Limits or ThrottlingCVE-2025-58185
Affects signoz-otel-collector | Versions <0.144.6-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
Resource ExhaustionCVE-2026-55831
Affects apache-nifi-registry | Versions <2.11.0-r0
Has fix
minimos:latestPublished 4 Aug 2026
Affects prometheus-3.5 | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- C
Insufficient Verification of Data AuthenticityCVE-2026-47691
Affects spark-4.2-scala-2.13-python | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- C
HTTP Request SmugglingCVE-2026-42581
Affects conductor-fips | Versions *
No fix available
minimos:latestPublished 4 Aug 2026
- L
CVE-2026-46595CVE-2026-46595
Affects pdfcpu-0.12 | Versions <0.12.1-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
Incorrect AuthorizationCVE-2026-59889
Affects apache-pulsar-4.2 | Versions <4.2.4-r0
Has fix
minimos:latestPublished 4 Aug 2026
Affects ld-relay-fips | Versions <8.20.0-r0
Has fix
minimos:latestPublished 4 Aug 2026
Affects apm-server-8.19 | Versions <8.19.19-r1
Has fix
minimos:latestPublished 4 Aug 2026
- L
Improper Input ValidationCVE-2026-54909
Affects livekit-sip-fips | Versions <1.8.0-r3
Has fix
minimos:latestPublished 4 Aug 2026