See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| xterm<371-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<1.19.5-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.17-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<1.19.5-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<68.7.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<23.2.4-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<78.6.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<24.1.6-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<1.19.5-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<68.9.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.03-r0 | alpine:3.23 | 4 Dec 2025 |
| wolfssl<5.5.3-r0 | alpine:3.23 | 4 Dec 2025 |
| yq-go<4.45.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<22.1.6-r0 | alpine:3.23 | 4 Dec 2025 |
| zabbix<7.0.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xterm<366-r0 | alpine:3.23 | 4 Dec 2025 |
| tpm2-tools<5.7-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.0-r0 | alpine:3.23 | 4 Dec 2025 |
| wolfssl<5.6.2-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<4.0.11-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<3.4.11-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<3.4.11-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<3.4.13-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<3.4.13-r0 | alpine:3.23 | 4 Dec 2025 |
| wireshark<3.0.7-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| traefik<3.1.3-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |