See the full list of npm packages compromised in the "Shai-Hulud supply chain attack – Sep 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsVULNERABILITY | AFFECTS | TYPE | PUBLISHED |
---|---|---|---|
| org.springframework.security:spring-security-core[6.4.4,6.4.10)[6.5.0,6.5.4) | Maven | 17 Sept 2025 |
| org.springframework:spring-core[,6.2.11) | Maven | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| Firefox[,143.0) | Unmanaged (C/C++) | 17 Sept 2025 |
| thunderbird-ESR[,140.3) | Unmanaged (C/C++) | 17 Sept 2025 |