https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T02:16:22.034577+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-9288 CVE-2025-9288 — Missing type checks leading to hash rewind and passing on crafted data 2026-09-30T02:16:22.766839+00:00

Affected: sha.js

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

 https://vulnerability.circl.lu/vuln/usn-7778-1 USN-7778-1 — node-sha.js vulnerability 2026-09-30T02:16:22.766930+00:00

Affected: Ubuntu:Pro:18.04:LTS: node-sha.js, Ubuntu:Pro:20.04:LTS: node-sha.js, Ubuntu:22.04:LTS: node-sha.js, Ubuntu:24.04:LTS: node-sha.js

Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other unspecified impact.