See the full list of npm packages compromised in the "SHA1-Hulud npm supply chain incident – Nov 2025" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
| VULNERABILITY | AFFECTS | TYPE | PUBLISHED |
|---|---|---|---|
| rclone<1.67.0-r0 | alpine:3.23 | 4 Dec 2025 |
| go<1.22.2-r0 | alpine:3.23 | 4 Dec 2025 |
| forgejo<1.21.10.0-r0 | alpine:3.23 | 4 Dec 2025 |
| kubernetes-event-exporter-advanced-compat* | minimos:latest | 3 Dec 2025 |
| kubernetes-event-exporter* | minimos:latest | 3 Dec 2025 |
| helm-4<4.0.1-r1 | chainguard:latest | 28 Nov 2025 |
| helm-3<3.19.2-r1 | chainguard:latest | 28 Nov 2025 |
| helm-fips-4<4.0.1-r1 | chainguard:latest | 28 Nov 2025 |
| helm-fips-3<3.19.2-r0 | chainguard:latest | 28 Nov 2025 |
| kubernetes-event-exporter-fips<1.7-r1 | minimos:latest | 27 Nov 2025 |
| cluster-version-operator<0.0.0 | rhel:10 | 7 Nov 2025 |
| smarter-device-manager-fips<1.20.11-r22 | chainguard:latest | 6 Nov 2025 |
| cadvisor-compat<0.49.1-r1 | minimos:latest | 6 Oct 2025 |
| cadvisor<0.49.1-r1 | minimos:latest | 6 Oct 2025 |
| go-1.20-doc* | minimos:latest | 6 Oct 2025 |
| go-1.20* | minimos:latest | 6 Oct 2025 |
| terragrunt-atlantis-config<1.20.0-r1 | minimos:latest | 6 Oct 2025 |
| solr-operator-0.8<0.8.1-r1 | minimos:latest | 6 Oct 2025 |
| go-1.20-doc<0.0.0 | minimos:latest | 29 Sept 2025 |
| go-1.20<0.0.0 | minimos:latest | 29 Sept 2025 |
| solr-operator-0.8<0.0.0 | minimos:latest | 29 Sept 2025 |
| cadvisor-compat<0.0.0 | minimos:latest | 29 Sept 2025 |
| cadvisor<0.0.0 | minimos:latest | 29 Sept 2025 |
| terragrunt-atlantis-config<0.0.0 | minimos:latest | 29 Sept 2025 |
| openshift-external-storage.src* | rhel:10 | 10 Sept 2025 |
| git-lfs<0:3.2.0-2.el9_3 | rhel:9 | 22 Aug 2025 |
| git-lfs<0:3.2.0-2.el9_3 | rhel:9 | 22 Aug 2025 |
| git-lfs<0:3.2.0-2.el9_3 | rhel:9 | 22 Aug 2025 |
| golang-bin<0:1.20.12-4.el9_3 | rhel:9 | 22 Aug 2025 |
| go-toolset<0:1.20.12-4.el9_3 | rhel:9 | 22 Aug 2025 |