vulnerability
Ubuntu: USN-7778-1 (CVE-2025-9288): sha.js vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:N/C:N/I:C/A:C) | Sep 25, 2025 | Sep 29, 2025 | Sep 29, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:N/C:N/I:C/A:C)
Published
Sep 25, 2025
Added
Sep 29, 2025
Modified
Sep 29, 2025
Description
Nikita Skovoroda discovered that sha.js did not properly handle
certain inputs. An attacker could possibly use this issue to manipulate
the internal state of hash functions, resulting in hash collisions,
denial of service, or other unspecified impact.
Solution
ubuntu-pro-upgrade-node-sha-js
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.