See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| limesurvey/limesurvey<6.14.1 | Composer | 21 Nov 2025 |
| limesurvey/limesurvey<6.14.2 | Composer | 21 Nov 2025 |
| limesurvey/limesurvey<6.15.0 | Composer | 21 Nov 2025 |
| devcode-it/openstamanager<2.9.5 | Composer | 20 Nov 2025 |
| mongodb/mongodb-extension>=1.20.0, <1.21.2 | Composer | 20 Nov 2025 |
| drupal/core>=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8 | Composer | 20 Nov 2025 |
| drupal/core>=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8 | Composer | 20 Nov 2025 |
| drupal/core>=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8 | Composer | 20 Nov 2025 |
| drupal/core>=8.0.0, <10.4.9>=10.5.0, <10.5.6>=11.0.0, <11.1.9>=11.2.0, <11.2.8 | Composer | 20 Nov 2025 |
| backdrop/backdrop>=0.0.0 | Composer | 19 Nov 2025 |
| privatebin/privatebin>=1.7.7, <2.0.3 | Composer | 19 Nov 2025 |
| ph7software/ph7builder>=0.0.0 | Composer | 19 Nov 2025 |
| librenms/librenms>=25.10.0 | Composer | 19 Nov 2025 |
| librenms/librenms>=25.10.0, <25.11.0 | Composer | 19 Nov 2025 |
| librenms/librenms>=25.10.0, <25.11.0 | Composer | 19 Nov 2025 |
| getkirby/cms>=5.0.0, <5.1.4 | Composer | 19 Nov 2025 |
| phpmyfaq/phpmyfaq<4.0.14 | Composer | 18 Nov 2025 |
| privatebin/privatebin>=1.7.7, <2.0.3 | Composer | 16 Nov 2025 |
| shopware/core<6.6.10.9>=6.7.0.0, <6.7.4.1 | Composer | 16 Nov 2025 |
| symfony/http-foundation<5.4.50>=6.0.0-BETA1, <6.4.29>=7.0.0-BETA1, <7.3.7 | Composer | 13 Nov 2025 |
| codingms/modules<4.3.11>=5.0.0, <5.7.4>=6.0.0, <6.4.2>=7.0.0, <7.5.5 | Composer | 12 Nov 2025 |
| torrentpier/torrentpier>=0.0.0 | Composer | 11 Nov 2025 |
| yungifez/skuul>=2.3.0 | Composer | 10 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |
| magento/community-edition<2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2 | Composer | 9 Nov 2025 |