See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Arbitrary Argument InjectionCVE-2026-12530
Affects bedrock-agentcore | Versions [1.1.3,1.6.1)
Has fix
pipPublished 29 Jun 2026
- H
Missing Authentication for Critical FunctionCVE-2026-53869
Affects hermes-agent | Versions [,0.16.0)
Has fix
pipPublished 29 Jun 2026
- M
Incorrect Default PermissionsCVE-2026-53870
Affects hermes-agent | Versions [,0.16.0)
Has fix
pipPublished 29 Jun 2026
- L
Insertion of Sensitive Information into Log FileCVE-2026-54711
Affects pghoard | Versions [0,]
Has fix
pipPublished 29 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-48053
Affects kolibri | Versions [,0.19.4)
Has fix
pipPublished 29 Jun 2026
- C
Eval InjectionCVE-2026-47103
Affects python-statemachine | Versions [3.0.0,3.2.0)
Has fix
pipPublished 29 Jun 2026
- H
Directory TraversalCVE-2026-55488
Affects motioneye | Versions [,0.44.0)
Has fix
pipPublished 29 Jun 2026
- M
Missing AuthorizationCVE-2026-55863
Affects motioneye | Versions [,0.44.0)
Has fix
pipPublished 29 Jun 2026
- H
Access Control BypassCVE-2026-31978
Affects motioneye | Versions [,0.44.0)
Has fix
pipPublished 29 Jun 2026
- M
Incorrect Permission Assignment for Critical ResourceCVE-2026-32315
Affects motioneye | Versions [,0.44.0)
Has fix
pipPublished 29 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-31235
Affects imgaug | Versions [0,]
Has fix
pipPublished 29 Jun 2026
- C
Deserialization of Untrusted DataCVE-2026-31239
Affects mamba-ssm | Versions [0,]
Has fix
pipPublished 29 Jun 2026
- C
Arbitrary Code InjectionCVE-2026-25879
Affects langroid | Versions [,0.63.0)
Has fix
pipPublished 29 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2025-66407
Affects weblate | Versions [,5.15)
Has fix
pipPublished 29 Jun 2026
- L
Server-side Request Forgery (SSRF)CVE-2026-46497
Affects crawlee | Versions [,1.7.0)
Has fix
pipPublished 29 Jun 2026
- M
Directory TraversalCVE-2026-46486
Affects mvt | Versions [,2026.5.12)
Has fix
pipPublished 29 Jun 2026
- M
Incorrect Behavior OrderCVE-2026-44919
Affects ironic | Versions [,29.0.6)[30.0.0,37.0.0)
Has fix
pipPublished 29 Jun 2026
- C
Cross-site Scripting (XSS)CVE-2026-12048
Affects pgadmin4 | Versions [6.2,9.16)
Has fix
pipPublished 29 Jun 2026
- C
Missing Authentication for Critical FunctionCVE-2026-12046
Affects pgadmin4 | Versions [6.9,9.16)
Has fix
pipPublished 29 Jun 2026
- C
SQL InjectionCVE-2026-12045
Affects pgadmin4 | Versions [9.13,9.16)
Has fix
pipPublished 29 Jun 2026