See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| vips<8.9.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |
| virt-manager<2.2.1-r0 | alpine:3.23 | 4 Dec 2025 |
| virtualbox-guest-additions<6.1.36-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| xrdp<0.9.21.1-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<78.9.0-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<23.2.2-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<78.9.0-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.2-r0 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<78.6.1-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.05-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<21.1.4-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.31-r0 | alpine:3.23 | 4 Dec 2025 |
| xpdf<4.03-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.33-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.0-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.30.2-r3 | alpine:3.23 | 4 Dec 2025 |
| thunderbird<78.6.1-r0 | alpine:3.23 | 4 Dec 2025 |
| xwayland<24.1.7-r0 | alpine:3.23 | 4 Dec 2025 |
| upx<4.0.2-r0 | alpine:3.23 | 4 Dec 2025 |
| zoneminder<1.36.7-r0 | alpine:3.23 | 4 Dec 2025 |