CVE-2025-9288NVD

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

Severity Level

CRITICAL(9.1)

Published Date

Aug 20, 2025

Last Modified

Sep 12, 2025

Exploitation Status

????

EPSS Score (30-Day)

Data Pending

Root Weakness (CWE)

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required.

CVSS v4.0 Base Metrics

Attack VectorNetwork

Attack ComplexityHigh

Privileges RequiredNone

User InteractionNone

CVE Watchtower