See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- C
Arbitrary Code InjectionCVE-2026-54769
Affects langroid | Versions [,0.65.2)
Has fix
pipPublished 6 Jul 2026
- M
Directory TraversalCVE-2026-12479
Affects keras | Versions [,3.12.3)[3.13.0 ,3.15.0)
Has fix
pipPublished 6 Jul 2026
- C
Arbitrary Code InjectionCVE-2026-5366
Affects prefect | Versions [0,]
Has fix
pipPublished 6 Jul 2026
- H
Missing Authentication for Critical FunctionCVE-2026-55786
Affects flyto-core | Versions [2.26.2,2.26.4)
Has fix
pipPublished 6 Jul 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-55787
Affects flyto-core | Versions [,2.26.3)
Has fix
pipPublished 6 Jul 2026
- H
Memory Allocation with Excessive Size ValueCVE-2026-55380
Affects pillow | Versions [,12.3.0)
Has fix
pipPublished 6 Jul 2026
- H
Memory Allocation with Excessive Size ValueCVE-2026-55379
Affects pillow | Versions [,12.3.0)
Has fix
pipPublished 6 Jul 2026
- H
Memory Allocation with Excessive Size ValueCVE-2026-54060
Affects pillow | Versions [,12.3.0)
Has fix
pipPublished 6 Jul 2026
- H
Memory Allocation with Excessive Size ValueCVE-2026-54059
Affects pillow | Versions [,12.3.0)
Has fix
pipPublished 6 Jul 2026
- H
Directory TraversalCVE-2026-49297
Affects apache-airflow-providers-google | Versions [,22.2.0rc1)
Has fix
pipPublished 6 Jul 2026
- H
Improper Verification of Cryptographic SignatureCVE-2026-12252
Affects nltk | Versions [0,]
Has fix
pipPublished 6 Jul 2026
- H
Deserialization of Untrusted DataCVE-2026-12481
Affects keras | Versions [3.0.0, 3.12.3)[3.13.0, 3.15.0)
Has fix
pipPublished 6 Jul 2026
- L
Authorization Bypass Through User-Controlled KeyCVE-2026-14742
Affects langgraph | Versions [0,]
Has fix
pipPublished 5 Jul 2026
- H
Directory TraversalCVE-2026-12243
Affects nltk | Versions [0,3.10.0)
Has fix
pipPublished 5 Jul 2026
- H
Incomplete List of Disallowed InputsCVE-2026-14534
Affects fickling | Versions [,0.1.11)
Has fix
pipPublished 4 Jul 2026
- H
Protection Mechanism FailureCVE-2026-14535
Affects fickling | Versions [,0.1.12)
Has fix
pipPublished 4 Jul 2026
- H
Inefficient Algorithmic ComplexityCVE-2026-59094
Affects pathway | Versions [0,0.32.1)
Has fix
pipPublished 4 Jul 2026
- H
Directory TraversalCVE-2026-56445
Affects pynetdicom | Versions [0,]
Has fix
pipPublished 4 Jul 2026
- M
Directory TraversalCVE-2026-29509
Affects patool | Versions [,4.0.5)
Has fix
pipPublished 4 Jul 2026
- C
Missing Authentication for Critical FunctionCVE-2026-50027
Affects mcp-memory-service | Versions [,10.67.1)
Has fix
pipPublished 4 Jul 2026
- H
Unsafe Dependency ResolutionCVE-2026-49986
Affects neuro-cortex-memory | Versions [,3.18.0)
Has fix
pipPublished 4 Jul 2026
- H
Arbitrary Argument InjectionCVE-2026-52817
Affects linuxfabrik-lib | Versions [,5.1.0)
Has fix
pipPublished 4 Jul 2026
- H
Relative Path TraversalCVE-2026-50181
Affects langroid | Versions [,0.64.0)
Has fix
pipPublished 4 Jul 2026
- H
External Control of File Name or PathCVE-2026-49360
Affects recce | Versions [,1.50.0)
Has fix
pipPublished 4 Jul 2026
- M
Missing AuthorizationCVE-2026-49292
Affects kiwitcms | Versions [0,]
Has fix
pipPublished 4 Jul 2026