CVE-2025-9288
Missing type checks leading to hash rewind and passing on crafted data
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
CVSS 4.0 · 9.1 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products