Skip to content

PatchFirst · Latest vulnerabilities

node-sha.js vulnerabilities

Vulnerabilities published for node-sha.js in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

DSA-6002-1
Not ratedFix available
node-sha.js - security update
node-sha.js - security update
node-sha.js Operating systems
- Update to 2.4.11+~2.4.0-2+deb13u1
Published September 16, 2025Updated March 9, 2026
Source advisory ↗
CVE-2025-9288
Critical · CVSS 9.1EPSS 0.74%Fix available
Missing type checks leading to hash rewind and passing on crafted data
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
node-sha.js Operating systems
- Update to 2.4.11+~2.4.0-2+deb13u1
Published August 20, 2025Updated November 3, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →