Sha Js
1 CVEs
product
Monthly
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
Information Disclosure
Sha Js
Redhat
Suse
NVD
GitHub
CVSS 4.0
9.1
EPSS
0.0%
CVE-2025-9288
npm
EPSS 0%
CVSS 9.1
CRITICAL
POC
PATCH
Act Now
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
Information Disclosure
Sha Js
Redhat
+1
NVD
GitHub