Vendors / browserify Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 1
Exploited now browserify records in CISA KEV No browserify vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
CVSS 4.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00738 · Published 2025-08-20 · Partial fix · 2.4.12 CWE-20
Priority HIGH 72
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
CVSS 4.0 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0055 · Published 2025-08-20 · Partial fix · 1.0.5 CWE-20
Priority MEDIUM 61
pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js).
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00345 · Published 2026-09-29 · Fixed in 3.1.7 CWE-400
Priority LOW 34
browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00563 · Published 2023-10-26 · Partial fix · 4.2.2 CWE-347
Open these records in search → All records by CVSS severity
2 1 1 0 0
THREATIST.IORead the docs