Browserify Sha.js — known CVE vulnerabilities

Every CVE whose affected-product data names Browserify Sha.js, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-9288 — CVSS 9.1 (critical): Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.