See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Cross-site Scripting (XSS)CVE-2026-12047
Affects pgadmin4 | Versions [6.6,9.16)
Has fix
pipPublished 29 Jun 2026
- H
Command InjectionCVE-2026-55748
Affects horizon | Versions [0,26.0.0)
Has fix
pipPublished 29 Jun 2026
- M
Insertion of Sensitive Information Into Sent DataCVE-2026-54421
Affects ironic | Versions [17.0.0,]
Has fix
pipPublished 29 Jun 2026
- M
Allocation of Resources Without Limits or ThrottlingCVE-2026-44545
Affects daphne | Versions [4.2.0,4.2.2)
Has fix
pipPublished 29 Jun 2026
- H
Deserialization of Untrusted DataCVE-2026-50589
Affects ironic | Versions [32.0.0,37.0.0)
Has fix
pipPublished 29 Jun 2026
- M
Direct Request ('Forced Browsing')CVE-2026-49299
Affects neutron | Versions [26.0.0,]
Has fix
pipPublished 29 Jun 2026
- H
Authorization Bypass Through User-Controlled KeyCVE-2026-50266
Affects neutron | Versions [25.0.0,]
Has fix
pipPublished 29 Jun 2026
- M
HTTP Request SmugglingCVE-2026-44546
Affects daphne | Versions [,4.2.2)
Has fix
pipPublished 29 Jun 2026
- H
Exposed Dangerous Method or FunctionCVE-2026-41283
Affects mistral | Versions [20.0.0,]
Has fix
pipPublished 29 Jun 2026
- H
Improper Certificate ValidationCVE-2026-44393
Affects oslo.messaging | Versions [,18.0.0)
Has fix
pipPublished 29 Jun 2026
- H
Directory TraversalCVE-2026-48681
Affects ironic | Versions [17.0.0,29.0.6)[30.0.0,36.0.0)
Has fix
pipPublished 29 Jun 2026
- H
Unsafe Dependency ResolutionCVE-2026-5241
Affects transformers | Versions [,5.5.0)
Has fix
pipPublished 29 Jun 2026
- L
Authorization Bypass Through User-Controlled KeyCVE-2026-42999
Affects keystone | Versions [14.0.0,29.0.2)
Has fix
pipPublished 29 Jun 2026
- L
Incorrect Implementation of Authentication AlgorithmCVE-2026-42998
Affects keystone | Versions [14.0.0,29.0.2)
Has fix
pipPublished 29 Jun 2026
- L
Insufficient Session ExpirationCVE-2026-44394
Affects keystone | Versions [14.0.0,29.0.2)
Has fix
pipPublished 29 Jun 2026
- L
Incorrect Privilege AssignmentCVE-2026-43000
Affects keystone | Versions [14.0.0,29.0.2)
Has fix
pipPublished 29 Jun 2026
- M
Improper Ownership ManagementCVE-2026-40214
Affects openstack-cyborg | Versions [3.0.0,14.1.0)[15.0.0,15.0.1)[16.0.0,16.0.1)
Has fix
pipPublished 29 Jun 2026
- M
Incorrect AuthorizationCVE-2026-40213
Affects openstack-cyborg | Versions [3.0.0,14.1.0)[15.0.0,15.0.1)[16.0.0,16.0.1)
Has fix
pipPublished 29 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-47157
Affects aiograpi | Versions [,0.9.10)
Has fix
pipPublished 29 Jun 2026
Affects instagrapi | Versions [,2.6.9)
Has fix
pipPublished 29 Jun 2026
- H
Directory TraversalCVE-2026-48099
Affects wsgidav | Versions [,4.3.4)
Has fix
pipPublished 29 Jun 2026
- C
Insufficiently Protected CredentialsCVE-2026-48039
Affects meta-ads-mcp | Versions [,1.0.109)
Has fix
pipPublished 29 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2025-70960
Affects tendenci | Versions [0,]
Has fix
pipPublished 29 Jun 2026
- H
Command InjectionCVE-2023-25617
Affects sap-ai-sdk-base | Versions [0,]
Has fix
pipPublished 29 Jun 2026
- H
Directory TraversalCVE-2026-47731
Affects ait-core | Versions [,2.6.1)[3.1.0,3.1.1)
Has fix
pipPublished 29 Jun 2026
- C
Arbitrary Command InjectionCVE-2026-47708
Affects stata-mcp | Versions [,1.17.3)
Has fix
pipPublished 29 Jun 2026
- L
Improper Verification of Cryptographic SignatureCVE-2026-47192
Affects kas | Versions [4.8,5.3)
Has fix
pipPublished 29 Jun 2026