Are you talking about the Superfish vulnerability? It's never affected the business class Thinkpad lines [1], but it has affected a lot of the other laptops that Lenovo has shipped.

[1]: https://support.lenovo.com/us/en/product_security/ps500035-s...