See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| maxminddb>=0.11.0 <0.27.0 | Cargo | 30 Nov 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| OpenPrinting/cups[,2.4.15) | Unmanaged (C/C++) | 30 Nov 2025 |
| htcondor/htcondor[24.7.3,24.12.14)[25.0.0,25.0.3)[25.3.0,25.3.1) | Unmanaged (C/C++) | 30 Nov 2025 |
| tryton-sao<6.0.69>=6.2.0 <7.0.40>=7.2.0 <7.4.21>=7.6.0 <7.6.11 | npm | 30 Nov 2025 |
| net.jpountz.lz4:lz4[0,] | Maven | 30 Nov 2025 |
| org.lz4:lz4-pure-java[0,] | Maven | 30 Nov 2025 |
| org.lz4:lz4-java[,1.8.1) | Maven | 30 Nov 2025 |
| tryton-sao>=6.0.0 <6.0.67>=6.2.0 <7.0.38>=7.2.0 <7.4.19>=7.6.0 <7.6.9 | npm | 30 Nov 2025 |
| apache/kvrocks[2.9.0,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| apache/kvrocks[,2.14.0-rc1) | Unmanaged (C/C++) | 30 Nov 2025 |
| trytond[6.0.0,6.0.70)[7.0.0,7.0.40)[7.2.0,7.4.21)[7.6.0,7.6.11) | pip | 30 Nov 2025 |
| trytond[,7.6.11) | pip | 30 Nov 2025 |
| trytond[6.0.0,6.0.70)[7.0.0,7.0.40)[7.2.0,7.4.21)[7.6.0,7.6.11) | pip | 30 Nov 2025 |
| jvde-github/AIS-catcher[,0.64) | Unmanaged (C/C++) | 30 Nov 2025 |
| werkzeug[,3.1.4) | pip | 30 Nov 2025 |
| boost[,1.80.0) | Conan | 29 Nov 2025 |
| sdl[0,] | Conan | 28 Nov 2025 |
| simple_directmedia_layer[0,] | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.80.0-beta1) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.40.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[,1.40.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| boostorg/boost[1.48.0-beta1,1.56.0) | Unmanaged (C/C++) | 28 Nov 2025 |
| magick.net-q16-hdri-x86[,14.8.2) | NuGet | 28 Nov 2025 |
| magick.net-q16-x86[,14.8.2) | NuGet | 28 Nov 2025 |
| magick.net-q8-x86[,14.8.2) | NuGet | 28 Nov 2025 |
| magick.net-q8-anycpu[,14.8.2) | NuGet | 28 Nov 2025 |
| magick.net-q16-anycpu[,14.8.2) | NuGet | 28 Nov 2025 |
| magick.net-q16-hdri-anycpu[,14.8.2) | NuGet | 28 Nov 2025 |