See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| xrdp<0.9.13.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<23.2.5-r0 | alpine:3.23 | 4 Dec 2025 |
| virglrenderer<0.10.3-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.9-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.0-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.0-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<3.96-r1 | alpine:3.23 | 4 Dec 2025 |
| yara<4.2.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.16-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.7-r0 | alpine:3.23 | 4 Dec 2025 |
| transmission<3.00-r0 | alpine:3.23 | 4 Dec 2025 |
| wavpack<5.1.0-r3 | alpine:3.23 | 4 Dec 2025 |
| umoci<0.4.7-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.11-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<1.19.5-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.11-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<21.1.16-r0 | alpine:3.23 | 4 Dec 2025 |
| xorg-server<1.20.8-r4 | alpine:3.23 | 4 Dec 2025 |
| wolfssl<5.7.2-r0 | alpine:3.23 | 4 Dec 2025 |
| wolfssl<5.7.0-r0 | alpine:3.23 | 4 Dec 2025 |
| wolfssl<5.7.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |