See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| packer<1.14.3-r1 | chainguard:latest | 23 Nov 2025 |
| elastic-agent<9.2.1-r1 | chainguard:latest | 23 Nov 2025 |
| elastic-agent<9.2.1-r1 | chainguard:latest | 23 Nov 2025 |
| zarf<0.66.0-r1 | chainguard:latest | 23 Nov 2025 |
| zarf<0.66.0-r1 | chainguard:latest | 23 Nov 2025 |
| consul-1.20<1.20.6-r8 | chainguard:latest | 23 Nov 2025 |
| consul-1.20<1.20.6-r8 | chainguard:latest | 23 Nov 2025 |
| packer<1.14.3-r1 | chainguard:latest | 23 Nov 2025 |
| elastic-agent<9.2.1-r1 | chainguard:latest | 23 Nov 2025 |
| elastic-agent<9.2.1-r1 | chainguard:latest | 23 Nov 2025 |
| xeol<0.10.8-r19 | chainguard:latest | 23 Nov 2025 |
| xeol<0.10.8-r19 | chainguard:latest | 23 Nov 2025 |
| packer<1.14.3-r1 | chainguard:latest | 23 Nov 2025 |
| packer<1.14.3-r1 | chainguard:latest | 23 Nov 2025 |
| xeol<0.10.8-r19 | chainguard:latest | 23 Nov 2025 |
| xeol<0.10.8-r19 | chainguard:latest | 23 Nov 2025 |
| consul-1.18<1.18.2-r45 | chainguard:latest | 23 Nov 2025 |
| consul-1.18<1.18.2-r45 | chainguard:latest | 23 Nov 2025 |
| zarf<0.66.0-r1 | chainguard:latest | 23 Nov 2025 |
| zarf<0.66.0-r1 | chainguard:latest | 23 Nov 2025 |
| undock<0.10.0-r8 | chainguard:latest | 23 Nov 2025 |
| tigera-operator-1.40<1.40.2-r1 | chainguard:latest | 23 Nov 2025 |
| vault-secrets-webhook<1.22.1-r2 | chainguard:latest | 23 Nov 2025 |
| vault-secrets-webhook<1.22.1-r2 | chainguard:latest | 23 Nov 2025 |
| vault-secrets-webhook<1.22.1-r2 | chainguard:latest | 23 Nov 2025 |
| vault-secrets-webhook<1.22.1-r2 | chainguard:latest | 23 Nov 2025 |
| undock<0.10.0-r8 | chainguard:latest | 23 Nov 2025 |
| terraform<1.5.7-r35 | chainguard:latest | 23 Nov 2025 |
| velero<1.17.1-r1 | chainguard:latest | 23 Nov 2025 |
| velero<1.17.1-r1 | chainguard:latest | 23 Nov 2025 |