See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| openssh<9.7_p1-r0 | alpine:3.19 | 28 Nov 2025 |
| openssh<8.9_p1-r0 | alpine:3.19 | 28 Nov 2025 |
| openssh<8.3_p1-r0 | alpine:3.19 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.19 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.19 | 28 Nov 2025 |
| openssh<8.9_p1-r0 | alpine:3.21 | 28 Nov 2025 |
| openssh<9.7_p1-r0 | alpine:3.21 | 28 Nov 2025 |
| openssh<9.7_p1-r0 | alpine:3.20 | 28 Nov 2025 |
| openssh<8.9_p1-r0 | alpine:3.20 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.20 | 28 Nov 2025 |
| openssh<8.3_p1-r0 | alpine:3.20 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.20 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.21 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.21 | 28 Nov 2025 |
| openssh<9.7_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<8.3_p1-r0 | alpine:3.21 | 28 Nov 2025 |
| openssh<8.9_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<10.0_p1-r10 | alpine:3.22 | 28 Nov 2025 |
| openssh<10.0_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<9.6_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<8.3_p1-r0 | alpine:3.22 | 28 Nov 2025 |
| libpng<1.6.51-r0 | alpine:3.22 | 28 Nov 2025 |
| libpng<1.6.51-r0 | alpine:3.22 | 28 Nov 2025 |
| libpng<1.6.51-r0 | alpine:3.22 | 28 Nov 2025 |
| libpng<1.6.51-r0 | alpine:3.22 | 28 Nov 2025 |
| openssh<10.0_p1-r10 | alpine:3.22 | 27 Nov 2025 |
| perl-xml-sig<0.68-r0 | alpine:3.22 | 27 Nov 2025 |
| npm<11.6.4-r0 | alpine:3.22 | 27 Nov 2025 |
| salt-lts<3006.17-r0 | alpine:3.22 | 25 Nov 2025 |