See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Cross-site Scripting (XSS)CVE-2026-45348
Affects pyload-ng | Versions [,0.5.0b3.dev100)
Has fix
pipPublished 29 Jun 2026
- H
Directory TraversalCVE-2026-53925
Affects glances | Versions [4.0.8,4.5.5)
Has fix
pipPublished 29 Jun 2026
- H
Command InjectionCVE-2026-46606
Affects glances | Versions [,4.5.5)
Has fix
pipPublished 29 Jun 2026
- H
Deserialization of Untrusted DataCVE-2026-46607
Affects glances | Versions [,4.5.5)
Has fix
pipPublished 29 Jun 2026
- H
Permissive Cross-domain Policy with Untrusted DomainsCVE-2026-46608
Affects glances | Versions [,4.5.5)
Has fix
pipPublished 29 Jun 2026
- H
Missing AuthorizationCVE-2026-49291
Affects mcp-memory-service | Versions [,10.65.3)
Has fix
pipPublished 29 Jun 2026
- M
Server-side Request Forgery (SSRF)CVE-2026-46561
Affects pyload-ng | Versions [,0.5.0b3.dev100)
Has fix
pipPublished 29 Jun 2026
Affects justhtml | Versions [0.9.0,1.22.0)
Has fix
pipPublished 29 Jun 2026
- M
Incorrect Resource Transfer Between SpheresCVE-2026-46448
Affects nova | Versions [18.0.2,]
Has fix
pipPublished 29 Jun 2026
- H
Arbitrary Code InjectionCVE-2026-47781
Affects pdm | Versions [,2.27.0)
Has fix
pipPublished 29 Jun 2026
- M
Cross-site Scripting (XSS)CVE-2026-54386
Affects marimo | Versions [,0.23.9)
Has fix
pipPublished 28 Jun 2026
- M
Directory TraversalCVE-2026-8754
Affects astrbot | Versions [,4.23.6)
Has fix
pipPublished 28 Jun 2026
- M
Improper Export of Android Application ComponentsCVE-2026-54318
Affects homeassistant | Versions [,2026.5.3)
Has fix
pipPublished 28 Jun 2026
- H
Missing Authentication for Critical FunctionCVE-2026-54317
Affects homeassistant | Versions [,2026.6.0)
Has fix
pipPublished 28 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-57573
Affects crawl4ai | Versions [,0.9.0)
Has fix
pipPublished 28 Jun 2026
- C
Arbitrary Code InjectionCVE-2026-57572
Affects crawl4ai | Versions [,0.9.0)
Has fix
pipPublished 28 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-53755
Affects crawl4ai | Versions [,0.8.9)
Has fix
pipPublished 28 Jun 2026
- C
Improper Output Neutralization for LogsCVE-2026-56258
Affects crawl4ai | Versions [,0.8.8)
Has fix
pipPublished 28 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-53754
Affects crawl4ai | Versions [,0.8.8)
Has fix
pipPublished 28 Jun 2026
- C
Improper Control of Dynamically-Managed Code ResourcesCVE-2026-53753
Affects crawl4ai | Versions [,0.8.7)
Has fix
pipPublished 28 Jun 2026
- C
Use of Hard-coded CredentialsCVE-2026-56260
Affects crawl4ai | Versions [,0.8.7)
Has fix
pipPublished 28 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-56259
Affects crawl4ai | Versions [,0.8.8)
Has fix
pipPublished 28 Jun 2026
Affects jupyter-enterprise-gateway | Versions [2.0.0rc2,3.3.0)
Has fix
pipPublished 28 Jun 2026
- C
Incorrect Behavior Order: Validate Before CanonicalizeCVE-2026-44180
Affects jupyter-enterprise-gateway | Versions [2.0.0rc1,3.3.0)
Has fix
pipPublished 28 Jun 2026
- M
Information ExposureCVE-2026-54445
Affects vantage6 | Versions [,5.0.0)
Has fix
pipPublished 28 Jun 2026
- M
Access Control BypassCVE-2026-54533
Affects vantage6 | Versions [, 5.0.0)
Has fix
pipPublished 28 Jun 2026