2 matches found
CVE-2025-9287
An improper input validation vulnerability was found in the cipher-base npm package. Missing input type checks in the polyfill of the Node.js createHash function result in invalid value calculations, hanging and rewinding the hash state, including turning a tagged hash into an untagged hash, for...
9.1CVSS7.1AI score0.00504EPSS
SaveExploits1References5
20