Sha Js

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-9288 Aug 20, 22:15 npm CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Red Hat Suse Sha Js Browserify

NVD GitHub

CVSS 4.0

9.1

EPSS

0.0%

CVE-2025-9288 npm

EPSS 0% CVSS 9.1

CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Red Hat Suse +2

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy