See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applications| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| vino<3.22.0-6ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| libvncserver<0.9.11+dfsg-1ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu2 | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu2 | ubuntu:25.10 | 2 Dec 2025 |
| golang-google-grpc* | ubuntu:25.10 | 2 Dec 2025 |
| twisted<18.9.0-6ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| grpc* | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu2 | ubuntu:25.10 | 2 Dec 2025 |
| golang-google-grpc* | ubuntu:25.10 | 2 Dec 2025 |
| twisted<18.9.0-6ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| grpc* | ubuntu:25.10 | 2 Dec 2025 |
| trafficserver* | ubuntu:25.10 | 2 Dec 2025 |
| twisted<18.9.0-6ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu2 | ubuntu:25.10 | 2 Dec 2025 |
| vino<3.22.0-6ubuntu3 | ubuntu:25.10 | 2 Dec 2025 |
| trafficserver* | ubuntu:25.10 | 2 Dec 2025 |
| trafficserver* | ubuntu:25.10 | 2 Dec 2025 |
| trafficserver* | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-lts<11.0.19+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-17<17.0.7+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| trafficserver* | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-lts<11.0.19+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-17<17.0.7+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-lts<11.0.18+10-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-17<17.0.6+10-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-17<17.0.6+10-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-lts<11.0.19+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-17<17.0.7+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |
| openjdk-lts<11.0.19+7~us1-0ubuntu1 | ubuntu:25.10 | 2 Dec 2025 |