sha.js: sha.js is missing type checks leading to hash rewind and passing on crafted data
sha.js is missing type checks leading to hash rewind and passing on crafted data (critical). GHSA-95m3-7q98-8xr5, CVE-2025-9288.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
sha.js is missing type checks leading to hash rewind and passing on crafted data
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?