Browserify

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-9288 Aug 20, 22:15 npm CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Red Hat Suse Sha Js Browserify

NVD GitHub

CVSS 4.0

9.1

EPSS

0.0%

CVE-2025-9287 Aug 20, 22:15 npm CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.0.4. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Red Hat Suse Cipher Base Browserify

NVD GitHub

CVSS 4.0

9.1

EPSS

0.1%

CVE-2023-46234 Oct 26, 15:15 npm HIGH PATCH This Week

browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Debian Jwt Attack Debian Linux Browserify Sign +1

NVD GitHub

CVSS 3.1

7.5

EPSS

0.5%

CVE-2025-9288 npm

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Information Disclosure Red Hat Suse +2

NVD GitHub

CVE-2025-9287 npm

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Information Disclosure Red Hat Suse +2

NVD GitHub

CVE-2023-46234 npm

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Debian Jwt Attack +3

NVD GitHub