← Back

CVE-2025-9288

nvd nist
Published: Aug 20, 2025Modified: Nov 3, 2025

JSON object

Loading...
9.1
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: 7ffcee3d-2c14-4c3e-b844-86c6a321a158 (Secondary)

Description

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

Affected (1)

Products: Browserify: Sha.js
Browserify
1 product
Sha.js
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Sha.js
Up to 2.4.11

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

Source: 7ffcee3d-2c14-4c3e-b844-86c6a321a158
Issue TrackingPatch
Source: 7ffcee3d-2c14-4c3e-b844-86c6a321a158
ExploitVendor Advisory
Source: 7ffcee3d-2c14-4c3e-b844-86c6a321a158
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
ExploitVendor Advisory

Timeline

No history available yet.