CVEs-PoC/2025/CVE-2025-9288.md

CVE-2025-9288

Description

Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.

POC

Reference

• https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5

Github

• https://github.com/GrammaTonic/github-runner
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/harborist/advisories
• https://github.com/w4zu/Debian_security