Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:16:19 +0000 CVE-2025-9288 — Missing type checks leading to hash rewind and passing on crafted data https://vulnerability.circl.lu/vuln/cve-2025-9288 <p><strong>Affected:</strong> sha.js</p> <p>Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.</p> <p><strong>Affected:</strong> sha.js</p> <p>Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.</p> https://vulnerability.circl.lu/vuln/cve-2025-9288 USN-7778-1 — node-sha.js vulnerability https://vulnerability.circl.lu/vuln/usn-7778-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-sha.js, Ubuntu:Pro:20.04:LTS: node-sha.js, Ubuntu:22.04:LTS: node-sha.js, Ubuntu:24.04:LTS: node-sha.js</p> <p>Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other unspecified impact.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-sha.js, Ubuntu:Pro:20.04:LTS: node-sha.js, Ubuntu:22.04:LTS: node-sha.js, Ubuntu:24.04:LTS: node-sha.js</p> <p>Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of hash functions, resulting in hash collisions, denial of service, or other unspecified impact.</p> https://vulnerability.circl.lu/vuln/usn-7778-1