See the full list of npm packages affected by the "Mastra Supply Chain Compromise - June 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Unchecked Input for Loop ConditionCVE-2026-10143
Affects kafka-python | Versions [,2.2.20)[2.3.0,2.3.2)
Has fix
pipPublished 12 Jun 2026
- H
Allocation of Resources Without Limits or ThrottlingCVE-2026-48045
Affects zeroconf | Versions [,0.149.12)
Has fix
pipPublished 12 Jun 2026
- H
Directory TraversalCVE-2026-11816
Affects keras | Versions [,3.12.2)[3.13.0,3.14.0)
Has fix
pipPublished 12 Jun 2026
- M
Use of Incorrectly-Resolved Name or ReferenceCVE-2026-47155
Affects vllm | Versions [,0.22.0)
Has fix
pipPublished 11 Jun 2026
- L
Cross-site Scripting (XSS)CVE-2026-48060
Affects litestar | Versions [2.0.0b1,2.22.0)
Has fix
pipPublished 11 Jun 2026
- M
Reliance on Untrusted Inputs in a Security DecisionCVE-2026-48061
Affects litestar | Versions [,2.22.0)
Has fix
pipPublished 11 Jun 2026
- H
Directory TraversalCVE-2026-52726
Affects dulwich | Versions [0.23.2,1.2.5)
Has fix
pipPublished 11 Jun 2026
- H
Improper Resource Shutdown or ReleaseCVE-2026-47213
Affects boxlite | Versions [0,]
Has fix
pipPublished 11 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-39922
Affects geonode | Versions [4.0.0rc0,]
Has fix
pipPublished 11 Jun 2026
- M
External Control of File Name or PathCVE-2026-46383
Affects apm-cli | Versions [,0.13.0)
Has fix
pipPublished 10 Jun 2026
- M
Symlink AttackCVE-2026-45539
Affects apm-cli | Versions [0.5.4, 0.13.0)
Has fix
pipPublished 10 Jun 2026
- M
Missing AuthorizationCVE-2026-46645
Affects sqladmin | Versions [,0.25.1)
Has fix
pipPublished 10 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-46556
Affects flaskbb | Versions [0,]
Has fix
pipPublished 10 Jun 2026
- M
Unsafe Dependency ResolutionCVE-2026-47398
Affects praisonai | Versions [,4.6.38)
Has fix
pipPublished 10 Jun 2026
- H
Missing AuthorizationCVE-2026-47394
Affects praisonai | Versions [,4.6.40)
Has fix
pipPublished 10 Jun 2026
Affects compliance-trestle | Versions [,3.12.2)[4.0.0,4.0.3)
Has fix
pipPublished 10 Jun 2026
- H
Server-side Request Forgery (SSRF)CVE-2026-46380
Affects compliance-trestle | Versions [,3.12.2)[4.0.0,4.0.3)
Has fix
pipPublished 10 Jun 2026
- M
Directory TraversalCVE-2026-45774
Affects compliance-trestle | Versions [,3.12.2)[4.0.0,4.0.3)
Has fix
pipPublished 10 Jun 2026
- H
Directory TraversalCVE-2026-45725
Affects compliance-trestle | Versions [,3.12.2)[4.0.0,4.0.3)
Has fix
pipPublished 10 Jun 2026
- H
External Control of File Name or PathCVE-2026-46345
Affects compliance-trestle | Versions [,3.12.2)[4.0.0,4.0.3)
Has fix
pipPublished 10 Jun 2026
- M
Directory TraversalCVE-2026-47397
Affects praisonai | Versions [,4.6.40)
Has fix
pipPublished 10 Jun 2026
- H
Deserialization of Untrusted DataCVE-2026-9291
Affects amazon-braket-sdk | Versions [1.10.0,1.117.0)
Has fix
pipPublished 10 Jun 2026
- H
Incorrect Privilege AssignmentCVE-2026-8752
Affects h2o | Versions [0,]
Has fix
pipPublished 10 Jun 2026
- M
Memory Allocation with Excessive Size ValueCVE-2026-47734
Affects dulwich | Versions [,1.2.5)
Has fix
pipPublished 9 Jun 2026
- M
Directory TraversalCVE-2026-47712
Affects dulwich | Versions [0.24.0,1.2.5)
Has fix
pipPublished 9 Jun 2026