Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-9288

33
FAUCET Score

CVE-2025-9288 is a critical improper input validation vulnerability in sha.js versions through 2.4.11, allowing remote input data manipulation. With a CVSS score of 9.1 (CRITICAL), this vulnerability is easily exploitable over the network with no user interaction, potentially leading to high integrity and availability impacts. While there is no known active exploitation or public exploit code, the vulnerability has garnered some community attention, with a recent mention highlighting the lack of a patch and advising mitigation strategies.

Impacted Technologies

VendorProductVersion(s)CPE
<= 2.4.11CPE matchmatch criteria
cpe:2.3:a:browserify:sha.js:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 4.0

9.1CRITICAL

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
NETWORK
Attack Complexity
HIGH
Attack Requirements
PRESENT
Privileges Required
NONE
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
HIGH
VS Availability
HIGH
SS Confidentiality
HIGH
SS Integrity
HIGH
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.68%
Probability of exploitation in next 30 days
EPSS Percentile
48.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0068 is in the 30th percentile among its peer group of 36,833 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (115)

github_advisorypatch availablevia nvd_reference
View patch
npmpatch availablevia ghsa
Product: sha.jsFixed in: 2.4.12
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-addon-manager-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-image-service-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-agent-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-installer-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-assisted-service-9-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-api-provider-agent-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-api-provider-kubevirt-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine/cluster-api-rhel9:v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-clusterclaims-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-curator-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-image-set-controller-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-clusterlifecycle-state-metrics-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-proxy-addon-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-cluster-proxy-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-console-mce-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-discovery-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hive-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-addon-operator-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-cli-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-hypershift-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-image-based-install-container-v2.7.6-11
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-kube-rbac-proxy-mce-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-managedcluster-import-controller-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-managed-serviceaccount-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 8Fixed in: multicluster-engine-assisted-service-8-container-v2.7.6-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: search-collector-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: submariner-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: thanos-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: thanos-receive-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.6Fixed in: multicluster-engine/console-mce-rhel9:sha256:815f982a1c98589862e4cb396a23439e3c6cd171c74cf685f9939d73b6bdd03d
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.8Fixed in: multicluster-engine/console-mce-rhel9:sha256:df8887814a9c13cff03878c0aa83a45615c5a130cb084eab6a7ed935052c8d0d
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.9Fixed in: multicluster-engine/console-mce-rhel9:sha256:f77574607b8ad0a42d5527f58243e4987a99bbee91f1bcd4f458720619f84b99
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed in: rhacm2/console-rhel9:sha256:f5b8ac02f178fdfc039bd97fa5b9b395c0b1c7f84be95dcf81aa46ecc4bafd33
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed in: rhacm2/console-rhel9:sha256:5b10ad33c3d6df9518e9ef67876b76023f5ff6604275ef9cabc0a323c458b85f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/acm-grafana-rhel9:sha256:feffbb2c5cd8b8edb0944e5d1c49bb49aeb902bb6f44343a7e882c060efaa108
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed in: rhacm2/console-rhel9:sha256:8d21a1ec53eff605f99f5a79162e7fcf5092a3c30bcbd21b23f0c7bd9bc5bdcf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.6Fixed in: rhdh/rhdh-hub-rhel9:sha256:48b72d96926999336505cbf097f873dd9ccb2dec814a5db7f7ffa630dea29dc5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.7Fixed in: rhdh/rhdh-hub-rhel9:sha256:34534577a381685582d880b753a44b243fdd09697c878d5fbee790f55dba3d7a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.23Fixed in: devspaces/code-rhel9:sha256:2bfe5265856abdd8cb490bde852d4e992f1793684f003d1ef53776fe69d790d7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.23Fixed in: devspaces/dashboard-rhel9:sha256:905d45518e20ea10daa3a35ea2f2201a6f762a16f9b4829ce37b7396d493ac59
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.23Fixed in: devspaces/machineexec-rhel9:sha256:d23a4d9f0967f53d15fefda63e972e035d23aebe819dd11a6cec9beceacd8997
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Pipelines 1.19Fixed in: openshift-pipelines/pipelines-hub-api-rhel9:sha256:ef9600ffab4ef449efacb7b74c982215406f74b7fc03d969f93004880c97e3ee
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Trusted Artifact Signer 1.2Fixed in: rhtas/rekor-search-ui-rhel9:sha256:fe31830df2d99359749cb86cd1ac2f32fcc3de07aae427d2f2cd3998d31d2833
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-multicloud-manager-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-must-gather-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-operator-bundle-container-v2.7.6-9
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-operator-container-v2.7.6-5
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-placement-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-provider-credential-controller-container-v2.7.6-4
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-registration-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-registration-operator-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: multicluster engine for Kubernetes 2.7 for RHEL 9Fixed in: multicluster-engine-work-container-v2.7.6-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-cli-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-cluster-permission-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-governance-policy-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-governance-policy-framework-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-grafana-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-multicluster-observability-addon-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-must-gather-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-operator-bundle-container-v2.12.5-9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-prometheus-config-reloader-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-prometheus-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-indexer-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-v2-api-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-search-v2-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-siteconfig-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: acm-volsync-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: cert-policy-controller-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: cluster-backup-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: config-policy-controller-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: console-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: endpoint-monitoring-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: governance-policy-propagator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: grafana-dashboard-loader-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: insights-client-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: insights-metrics-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: klusterlet-addon-controller-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: kube-rbac-proxy-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: kube-state-metrics-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: memcached-exporter-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: metrics-collector-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicloud-integrations-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multiclusterhub-operator-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-observability-operator-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-application-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-channel-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: multicluster-operators-subscription-operator-container-v2.12.5-5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: node-exporter-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: observatorium-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: observatorium-operator-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: prometheus-alertmanager-container-v2.12.5-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: prometheus-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: rbac-query-proxy-container-v2.12.5-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed in: rhacm2/memcached-rhel9:v2.12.5-3
View patch
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8
redhatno patchvia redhat_api
Product: streams for Apache Kafka 3Fixed in: com.github.streamshub-console
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Fuse 7Fixed in: io.apicurio-apicurito
redhatno patchvia redhat_api
Product: Red Hat Trusted Profile AnalyzerFixed in: rhtpa/rhtpa-trustification-service-rhel9
redhatno patchvia redhat_api
Product: streams for Apache Kafka 2Fixed in: com.github.streamshub-console
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-operator-bundle
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-ossmc-rhel9
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-extensions-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Fuse 7Fixed in: io.syndesis-syndesis-parent
redhatend of lifevia redhat_api
Product: OpenShift ServerlessFixed in: openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel8
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 2Fixed in: openshift-service-mesh/kiali-ossmc-rhel8
redhatend of lifevia redhat_api
Product: OpenShift Service Mesh 2Fixed in: openshift-service-mesh/kiali-rhel8

Vendor Advisories (3)

npmGHSA-95m3-7q98-8xr5critical

sha.js is missing type checks leading to hash rewind and passing on crafted data

Aug 21, 2025
redhatCVE-2025-9288Important

sha.js: Missing type checks leading to hash rewind and passing on crafted data

Aug 20, 2025
microsoft2025-Aug/CVE-2025-9288Important

Missing type checks leading to hash rewind and passing on crafted data

Aug 12, 2025

References

github.com / browserify/sha.js/pull/78
Issue TrackingPatch
github.com / browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5
ExploitVendor Advisory
cve.org / CVERecord
Third Party Advisory
lists.debian.org / debian-lts-announce/2025/09/msg00016.html