USN-7778-1 node-sha.js vulnerability

🗓️ 25 Sep 2025 19:48:43Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Sha.js mishandles inputs, enabling hash state manipulation and potential collisions or denial of service.

Reporter	Title	Published	Views	Family All 67
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in sha.js-2.4.11.tgz CVE-2025-9288	22 Oct 202511:24	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to improper input validation due to the sha.js package (CVE-2025-9288)	28 Nov 202519:02	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of the sha.js library, IBM watsonx Code Assistant IDE Extensions is affected by Improper Input Validation vulnerability	19 Nov 202515:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	28 Oct 202505:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in sha.js affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	29 Dec 202507:27	–	ibm
AstraLinux	Astra Linux - уязвимость в node-sha.js	3 May 202623:59	–	astralinux
Chainguard	CVE-2025-9288 vulnerabilities	3 Sep 202501:25	–	cgr
Circl	CVE-2025-9288	20 Aug 202521:59	–	circl
CNNVD	sha.js 安全漏洞	20 Aug 202500:00	–	cnnvd
CVE	CVE-2025-9288	20 Aug 202521:59	–	cve