See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| postgresql16<16.11-r0 | alpine:3.22 | 16 Nov 2025 |
| postgresql17<17.7-r0 | alpine:3.21 | 16 Nov 2025 |
| postgresql15<15.15-r0 | alpine:3.20 | 16 Nov 2025 |
| postgresql15<15.15-r0 | alpine:3.20 | 16 Nov 2025 |
| postgresql16<16.11-r0 | alpine:3.20 | 16 Nov 2025 |
| postgresql16<16.11-r0 | alpine:3.20 | 16 Nov 2025 |
| jq<1.8.1-r0 | alpine:3.22 | 16 Nov 2025 |
| postgresql17<17.7-r0 | alpine:3.22 | 15 Nov 2025 |
| postgresql17<17.7-r0 | alpine:3.22 | 15 Nov 2025 |
| py3-django<4.2.26-r0 | alpine:3.22 | 14 Nov 2025 |
| py3-django<4.2.26-r0 | alpine:3.22 | 14 Nov 2025 |
| podman<5.6.2-r1 | alpine:3.22 | 12 Nov 2025 |
| buildah<1.41.6-r0 | alpine:3.22 | 12 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| valkey<8.1.4-r0 | alpine:3.22 | 11 Nov 2025 |
| valkey<8.1.4-r0 | alpine:3.22 | 11 Nov 2025 |
| valkey<8.1.4-r0 | alpine:3.22 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<8.1.4-r0 | alpine:3.22 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.21 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| valkey<7.2.11-r0 | alpine:3.20 | 11 Nov 2025 |
| samba<4.21.9-r0 | alpine:3.22 | 10 Nov 2025 |