See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Improper Handling of Unicode EncodingCVE-2026-59890
Affects setuptools | Versions [,83.0.0)
Has fix
pipPublished 8 Jul 2026
- H
Directory TraversalCVE-2026-53951
Affects copier | Versions [9.5.0,9.15.2)
Has fix
pipPublished 8 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-59929
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- M
Insufficient Verification of Data AuthenticityCVE-2026-59930
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-59925
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- M
Uncontrolled RecursionCVE-2026-59927
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-59922
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-59926
Affects mistune | Versions [,3.2.1)
Has fix
pipPublished 8 Jul 2026
- M
Cross-site Scripting (XSS)CVE-2026-59923
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-59928
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- H
Directory TraversalCVE-2026-59924
Affects mistune | Versions [,3.3.0)
Has fix
pipPublished 8 Jul 2026
- M
Excessive IterationCVE-2026-59937
Affects pypdf | Versions [,6.14.0)
Has fix
pipPublished 8 Jul 2026
- M
Memory Allocation with Excessive Size ValueCVE-2026-59938
Affects pypdf | Versions [,6.14.0)
Has fix
pipPublished 8 Jul 2026
- M
Arbitrary Command InjectionCVE-2026-15035
Affects openllm | Versions [0,]
Has fix
pipPublished 8 Jul 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-10177
Affects aider-chat | Versions [0,]
Has fix
pipPublished 8 Jul 2026
Affects flask-security-too | Versions [5.8.0,]
Has fix
pipPublished 8 Jul 2026
Affects ha-mcp | Versions [,7.7.0)
Has fix
pipPublished 8 Jul 2026
- H
XML External Entity (XXE) InjectionCVE-2024-37388
Affects ebookmeta | Versions [,1.2.8)
Has fix
pipPublished 8 Jul 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-50127
Affects weblate | Versions [5.15, 2026.6)
Has fix
pipPublished 8 Jul 2026
- H
Missing AuthorizationCVE-2026-58473
Affects cognee | Versions [,1.2.0)
Has fix
pipPublished 8 Jul 2026
- M
Open RedirectCVE-2026-40961
Affects apache-airflow-core | Versions [,3.2.2rc1)
Has fix
pipPublished 8 Jul 2026
- L
Use of Cache Containing Sensitive InformationCVE-2026-48588
Affects django | Versions [,5.2.16)[6.0a1,6.0.7)
Has fix
pipPublished 7 Jul 2026
- M
Buffer Access with Incorrect Length ValueCVE-2026-53877
Affects django | Versions [,5.2.16)[6.0a1,6.0.7)
Has fix
pipPublished 7 Jul 2026
- M
Improper NeutralizationCVE-2026-53878
Affects django | Versions [,5.2.16)[6.0a1,6.0.7)
Has fix
pipPublished 7 Jul 2026
- H
Cross-site Scripting (XSS)CVE-2025-46719
Affects open-webui | Versions [,0.6.6)
Has fix
pipPublished 7 Jul 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-34225
Affects open-webui | Versions [,0.9.5)
Has fix
pipPublished 7 Jul 2026