See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects simple-date-formatter-new-1 | Versions *
No fix available
npmPublished 4 Aug 2026
- M
Directory TraversalCVE-2026-69153
Affects postcss | Versions <8.5.23
Has fix
npmPublished 3 Aug 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-69152
Affects brace-expansion | Versions <1.1.18>=2.0.0 <2.1.4>=3.0.0 <3.0.6>=4.0.0 <5.0.9
Has fix
npmPublished 3 Aug 2026
Affects list-issue-predecessor-dependencies-block | Versions *
No fix available
npmPublished 3 Aug 2026
Affects simple-date-formatter-util-5 | Versions *
No fix available
npmPublished 3 Aug 2026
Affects lifestyle-test-utils | Versions *
No fix available
npmPublished 3 Aug 2026
Affects accounts-loading-state | Versions *
No fix available
npmPublished 3 Aug 2026
Affects beaver-ui-date-range-picker | Versions *
No fix available
npmPublished 3 Aug 2026
Affects beaver-ui-items-with-more | Versions *
No fix available
npmPublished 3 Aug 2026
Affects bigops-chat-messages | Versions *
No fix available
npmPublished 3 Aug 2026
Affects @custombots/custombot | Versions *
No fix available
npmPublished 3 Aug 2026
Affects simple-date-formatter-util-2 | Versions *
No fix available
npmPublished 3 Aug 2026
Affects simple-date-formatter-util-1 | Versions *
No fix available
npmPublished 3 Aug 2026
Affects simple-date-formatter-util | Versions *
No fix available
npmPublished 3 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2025-51684
Affects clevertap-web-sdk | Versions <1.15.2
Has fix
npmPublished 2 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-54705
Affects mathlive | Versions <0.110.0
Has fix
npmPublished 2 Aug 2026
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-67330
Affects @better-auth/scim | Versions <1.6.22>=1.7.0-beta.0 <1.7.0-beta.10
Has fix
npmPublished 2 Aug 2026