August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-9288NVD

Vulnerability Summary

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
Severity Level
CRITICAL(9.1)
Published Date
Aug 20, 2025
Last Modified
Sep 12, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-20: Improper Input Validation ↗
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionNone

External References