Sha Js

1 CVEs product

Monthly

CVE-2025-9288 npm CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Sha Js Redhat Suse
NVD GitHub
CVSS 4.0
9.1
EPSS
0.0%
EPSS 0% CVSS 9.1
CRITICAL POC PATCH Act Now

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.js: through 2.4.11. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Sha Js Redhat +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy