Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2025-9288

Missing type checks leading to hash rewind and passing on crafted data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
harborist

Description

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

sha.js

Default version status: unaffected

  • 0 to ≤ 2.4.11affected

References