All products

sha.js

npm · Package
1 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
sha.js is missing type checks leading to hash rewind and passing on crafted dataCVE-2025-9288 · GHSA-95M3-7Q98-8XR5 sha.jsOpenShift Pipelines/openshift-pipelines/pipelines-hub-db-migration-rhel9 npmRed Hat Critical Fix reported