Approved changes feed: RSS · Atom

cpe:2.3:a:browserify:cipher-base:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorBrowserify (35a535b1-4062-5a71-ab31-40db347356ed)
ProductCipher Base (9b23ff0d-8376-5afd-958e-87b2688927b4)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/browserify/cipher-base purl2cpe 2026-06-01 10:11:41.506228
pkg:maven/org.webjars.npm/cipher-base purl2cpe 2026-06-01 10:11:41.506230
pkg:npm/cipher-base purl2cpe 2026-06-01 10:11:41.506232

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9287 vulnerable 2026-06-08 07:45:22.067574 Missing type checks leading to hash rewind and passing on crafted data
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
Published: 2025-08-20T21:43:56.548Z
Updated: 2025-11-03T18:14:17.043Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.