Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/21 2:47 p.m.7 views

GHSA-95M3-7Q98-8XR5 sha.js is missing type checks leading to hash rewind and passing on crafted data

Summary This is the same as GHSA-cpq7-6gpm-g9rc but just for sha.js, as it has its own implementation. Missing input type checks can allow types other than a well-formed Buffer or string, resulting in invalid values, hanging and rewinding the hash state including turning a tagged hash into an...

9.1CVSS6.7AI score0.00676EPSS
SaveExploits2References7
Rows per page
Query Builder