See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Cross-site Scripting (XSS)CVE-2026-67338
Affects jupyterlab | Versions *
No fix available
echo:latestPublished 2 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-67338
Affects jupyterlab | Versions *
No fix available
debian:unstablePublished 2 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-67338
Affects jupyterlab | Versions *
No fix available
debian:14Published 2 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-67338
Affects jupyterlab | Versions *
No fix available
debian:13Published 2 Aug 2026
- M
Cross-site Scripting (XSS)CVE-2026-67338
Affects @jupyterlab/extensionmanager | Versions <4.6.0-rc.0
Has fix
npmPublished 21 Jun 2026