{"schemaVersion":3,"id":"CVE-2025-9288","aliases":["UBUNTU-CVE-2025-9288","USN-7778-1","DEBIAN-CVE-2025-9288","DLA-4302-1","DSA-6002-1","CGA-2rhx-c76j-9gcv","CGA-592c-9gp6-j58h","CGA-5r4f-p2p6-8p4p","CGA-7229-qfcv-6qj9","CGA-7786-8vp8-c5hw","CGA-7mrm-w84r-vxmv","CGA-7pf6-8vr8-wp5p","CGA-8x28-qm68-w659","CGA-94pf-g8gv-37hx","CGA-9vpc-w7q5-h5vf","CGA-c964-5jr6-q4xv","CGA-f66r-2v9w-9rg8","CGA-f6q8-378f-wch6","CGA-ff73-2c8x-g497","CGA-frrx-xq6m-c648","CGA-g4hw-49r6-g5qg","CGA-g4mq-g36p-x5f9","CGA-gq2p-rrgf-75mw","CGA-h6gc-jg5h-2gxc","CGA-hj62-r499-vm3x","CGA-hr5x-457x-545q","CGA-jm43-c88r-q52x","CGA-pcm7-882j-q54h","CGA-qc4c-rxfr-g9ch","CGA-r2p9-r87h-hj38","CGA-v5m6-9872-fc43","CGA-wghj-4r36-cp64","CGA-xfqq-4j47-735w","GHSA-95m3-7q98-8xr5","CGA-2v68-5cvf-xchj","CGA-3765-67hc-fprf","CGA-398f-crfx-9q4r","CGA-3jr5-5493-fmj2","CGA-3vq7-6xv7-cj6f","CGA-3w94-c8xw-x42w","CGA-487r-fh8m-32f8","CGA-4grw-qfv4-hwwp","CGA-4h94-2wmg-2mw2","CGA-4p35-f46r-986g","CGA-5cfm-2rhm-fxrp","CGA-5chr-5gvg-78mh","CGA-636c-4m62-36w8","CGA-69c8-7gh5-p2wf","CGA-6h62-6j96-8265","CGA-6hfr-gpmw-mwf4","CGA-6hpw-hgcm-c8hc","CGA-6p3v-2pjh-7cr5","CGA-6vvr-q6xg-mxx5","CGA-7769-mmcg-cj4r","CGA-7fqm-9643-wgvr","CGA-7rfq-4p4v-3jcv","CGA-7wrv-w92w-3p7v","CGA-87f7-p7hg-p8w2","CGA-8jg2-9685-3828","CGA-94rg-vmrf-h8r9","CGA-97pf-pvg2-4hv8","CGA-97w3-4fw9-5q5p","CGA-9w73-6256-f4r8","CGA-c273-mxr3-v5px","CGA-c5r6-qqqc-q9c8","CGA-cqr4-mxcp-cj4q","CGA-cxj3-6c36-f4j2","CGA-f3rv-5fvf-g83f","CGA-fjjp-p6jq-mw8x","CGA-fmwv-qcw6-x577","CGA-fv46-wmgf-6xvp","CGA-gqqg-q7g3-5448","CGA-hcqv-4rj7-fm8v","CGA-hwcg-33f2-5q89","CGA-j8gf-pqm9-h7h4","CGA-jgh3-hc4f-976w","CGA-jm3g-h8h7-jhgf","CGA-mh8g-v2p2-2x6h","CGA-mqr5-cr2m-gx9r","CGA-p2f5-f8x2-frj6","CGA-pf5j-mh4g-g893","CGA-pm9p-mvx2-8wcj","CGA-px72-m6h7-mhgh","CGA-qfg3-388x-mp6h","CGA-qfgh-qvq3-2824","CGA-r4rm-54p7-m7mm","CGA-r58g-6m5p-793x","CGA-r875-w4xr-59fg","CGA-r8r6-2237-87f5","CGA-r8v8-4663-r9qf","CGA-rfpw-5w76-v79c","CGA-rfww-6j82-3vmf","CGA-rggr-4vgv-2j5v","CGA-rmmw-pfq6-gmgh","CGA-vm5m-fq9q-g5gq","CGA-w2xq-j27m-j43m","CGA-wgx2-3xw7-m5cx","CGA-wmf7-472x-3499","CGA-wmmp-4g67-3953","CGA-x258-rh92-7mcc","CGA-x37p-9883-qcp4","CGA-xhrw-4xxf-72fh","CGA-xw3x-cw86-f7fc","CGA-xwwq-j7fh-6xp6"],"status":"published","duplicateOf":null,"title":null,"description":"Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.","dates":{"published":"2025-08-20T21:59:44.728Z","modified":"2025-11-03T18:14:17.994Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.1,"severity":"critical","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","exploitability":10,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","exploitability":10,"impact":8.7,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Npm","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","exploitability":10,"impact":8.7,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.1,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00709,"percentile":0.52638,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.03299999999999996,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00676},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00709,"percentile":0.52638}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00676,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00709,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00709,"percentile":0.52638}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_BROWSERIFY_SHA.JS","name":"Sha.Js","source":"github","url":"https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"chainguard","product":"gitlab-rails-ce-18.1","name":"gitlab-rails-ce-18.1","label":"gitlab-rails-ce-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.10","name":"gitlab-rails-ce-18.10","label":"gitlab-rails-ce-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.10","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.11","name":"gitlab-rails-ce-18.11","label":"gitlab-rails-ce-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.5","name":"gitlab-rails-ce-18.5","label":"gitlab-rails-ce-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.6","name":"gitlab-rails-ce-18.6","label":"gitlab-rails-ce-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.7","name":"gitlab-rails-ce-18.7","label":"gitlab-rails-ce-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.8","name":"gitlab-rails-ce-18.8","label":"gitlab-rails-ce-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-18.9","name":"gitlab-rails-ce-18.9","label":"gitlab-rails-ce-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-18.9","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.0","name":"gitlab-rails-ce-19.0","label":"gitlab-rails-ce-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-19.1","name":"gitlab-rails-ce-19.1","label":"gitlab-rails-ce-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.1","name":"gitlab-rails-ce-fips-18.1","label":"gitlab-rails-ce-fips-18.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.1","purlType":"apk","versions":[{"text":"< 18.1.6-r30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.1.6-r30","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.10","name":"gitlab-rails-ce-fips-18.10","label":"gitlab-rails-ce-fips-18.10","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.10","purlType":"apk","versions":[{"text":"< 18.10.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.10.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.11","name":"gitlab-rails-ce-fips-18.11","label":"gitlab-rails-ce-fips-18.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.11","purlType":"apk","versions":[{"text":"< 18.11.6-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.11.6-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.5","name":"gitlab-rails-ce-fips-18.5","label":"gitlab-rails-ce-fips-18.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.6","name":"gitlab-rails-ce-fips-18.6","label":"gitlab-rails-ce-fips-18.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.6","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.7","name":"gitlab-rails-ce-fips-18.7","label":"gitlab-rails-ce-fips-18.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.7","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.8","name":"gitlab-rails-ce-fips-18.8","label":"gitlab-rails-ce-fips-18.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.8","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-18.9","name":"gitlab-rails-ce-fips-18.9","label":"gitlab-rails-ce-fips-18.9","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-18.9","purlType":"apk","versions":[{"text":"< 18.9.8-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 18.9.8-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.0","name":"gitlab-rails-ce-fips-19.0","label":"gitlab-rails-ce-fips-19.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.0","purlType":"apk","versions":[{"text":"< 19.0.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.0.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"gitlab-rails-ce-fips-19.1","name":"gitlab-rails-ce-fips-19.1","label":"gitlab-rails-ce-fips-19.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/gitlab-rails-ce-fips-19.1","purlType":"apk","versions":[{"text":"< 19.1.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 19.1.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nextcloud-server-31","name":"nextcloud-server-31","label":"nextcloud-server-31","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nextcloud-server-31","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-alerting-dashboards-plugin","name":"opensearch-dashboards-3-alerting-dashboards-plugin","label":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-config","name":"opensearch-dashboards-3-config","label":"opensearch-dashboards-3-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-config","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-maps","name":"opensearch-dashboards-3-dashboards-maps","label":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-maps","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-notifications","name":"opensearch-dashboards-3-dashboards-notifications","label":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-notifications","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-observability","name":"opensearch-dashboards-3-dashboards-observability","label":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-observability","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-query-workbench","name":"opensearch-dashboards-3-dashboards-query-workbench","label":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-reporting","name":"opensearch-dashboards-3-dashboards-reporting","label":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-reporting","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-dashboards-search-relevance","name":"opensearch-dashboards-3-dashboards-search-relevance","label":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","name":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","label":"opensearch-dashboards-3-fips-alerting-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-config","name":"opensearch-dashboards-3-fips-config","label":"opensearch-dashboards-3-fips-config","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-config","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-maps","name":"opensearch-dashboards-3-fips-dashboards-maps","label":"opensearch-dashboards-3-fips-dashboards-maps","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-maps","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-notifications","name":"opensearch-dashboards-3-fips-dashboards-notifications","label":"opensearch-dashboards-3-fips-dashboards-notifications","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notifications","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-observability","name":"opensearch-dashboards-3-fips-dashboards-observability","label":"opensearch-dashboards-3-fips-dashboards-observability","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-observability","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-query-workbench","name":"opensearch-dashboards-3-fips-dashboards-query-workbench","label":"opensearch-dashboards-3-fips-dashboards-query-workbench","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-reporting","name":"opensearch-dashboards-3-fips-dashboards-reporting","label":"opensearch-dashboards-3-fips-dashboards-reporting","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reporting","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-dashboards-search-relevance","name":"opensearch-dashboards-3-fips-dashboards-search-relevance","label":"opensearch-dashboards-3-fips-dashboards-search-relevance","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-index-management-dashboards-plugin","name":"opensearch-dashboards-3-fips-index-management-dashboards-plugin","label":"opensearch-dashboards-3-fips-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-ml-commons-dashboards","name":"opensearch-dashboards-3-fips-ml-commons-dashboards","label":"opensearch-dashboards-3-fips-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips-security-dashboards-plugin","name":"opensearch-dashboards-3-fips-security-dashboards-plugin","label":"opensearch-dashboards-3-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-index-management-dashboards-plugin","name":"opensearch-dashboards-3-index-management-dashboards-plugin","label":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-ml-commons-dashboards","name":"opensearch-dashboards-3-ml-commons-dashboards","label":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-security-dashboards-plugin","name":"opensearch-dashboards-3-security-dashboards-plugin","label":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-alerting-dashboards-plugin","name":"opensearch-dashboards-3-alerting-dashboards-plugin","label":"opensearch-dashboards-3-alerting-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","name":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","label":"opensearch-dashboards-3-anomaly-detection-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-config","name":"opensearch-dashboards-3-config","label":"opensearch-dashboards-3-config","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-config","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-maps","name":"opensearch-dashboards-3-dashboards-maps","label":"opensearch-dashboards-3-dashboards-maps","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-maps","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-notifications","name":"opensearch-dashboards-3-dashboards-notifications","label":"opensearch-dashboards-3-dashboards-notifications","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-notifications","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-observability","name":"opensearch-dashboards-3-dashboards-observability","label":"opensearch-dashboards-3-dashboards-observability","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-observability","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-query-workbench","name":"opensearch-dashboards-3-dashboards-query-workbench","label":"opensearch-dashboards-3-dashboards-query-workbench","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-query-workbench","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-reporting","name":"opensearch-dashboards-3-dashboards-reporting","label":"opensearch-dashboards-3-dashboards-reporting","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-reporting","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-dashboards-search-relevance","name":"opensearch-dashboards-3-dashboards-search-relevance","label":"opensearch-dashboards-3-dashboards-search-relevance","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-dashboards-search-relevance","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-index-management-dashboards-plugin","name":"opensearch-dashboards-3-index-management-dashboards-plugin","label":"opensearch-dashboards-3-index-management-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-ml-commons-dashboards","name":"opensearch-dashboards-3-ml-commons-dashboards","label":"opensearch-dashboards-3-ml-commons-dashboards","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-ml-commons-dashboards","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-security-analytics-dashboards-plugin","name":"opensearch-dashboards-3-security-analytics-dashboards-plugin","label":"opensearch-dashboards-3-security-analytics-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3-security-dashboards-plugin","name":"opensearch-dashboards-3-security-dashboards-plugin","label":"opensearch-dashboards-3-security-dashboards-plugin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 3.1.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.1.0-r4","eol":null,"hubHref":null},{"vendor":"browserify","product":"sha.js","name":"sha.js","label":"sha.js","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.4.11","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 2.4.11","eol":null,"hubHref":"/vendor/browserify/shajs"},{"vendor":"debian","product":"node-sha.js","name":"node-sha.js","label":"node-sha.js","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-sha.js","purlType":"deb","versions":[{"text":"< 2.4.12+~3.0.5-1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11+~2.4.0-2+deb12u1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11+~2.4.0-2+deb13u1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11-2+deb11u1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.12+~3.0.5-1 | < 2.4.11+~2.4.0-2+deb12u1 | < 2.4.11+~2.4.0-2+deb13u1 | < 2.4.11-2+deb11u1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-sha.js","name":"node-sha.js","label":"node-sha.js","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-sha.js","purlType":"deb","versions":[{"text":"< 2.4.9-1ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11-2ubuntu0.1~esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11+~2.4.0-1ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.11+~2.4.0-2+deb13u1build0.24.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.9-1ubuntu0.1~esm1 | < 2.4.11-2ubuntu0.1~esm1 | < 2.4.11+~2.4.0-1ubuntu0.1 | < 2.4.11+~2.4.0-2+deb13u1build0.24.04.1","eol":null,"hubHref":null},{"vendor":"Npm","product":"sha.js","name":"sha.js","label":"sha.js","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/sha.js","purlType":"npm","versions":[{"text":"< 2.4.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.12","eol":null,"hubHref":null}],"affectedCount":67,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5","label":"github.com/browserify/sha.js/security/advisories/GHSA-95m3-7q98-8xr5","hostname":"github.com","tags":["Vendor Advisory","REPORT","Advisory","WEB","Exploit"]},{"url":"https://github.com/browserify/sha.js/pull/78","label":"github.com/browserify/sha.js/pull/78","hostname":"github.com","tags":["Patch","REPORT","FIX","WEB","Issue Tracking"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9287","label":"www.cve.org/CVERecord?id=CVE-2025-9287","hostname":"www.cve.org","tags":["Related","REPORT","WEB","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00016.html","label":"lists.debian.org/debian-lts-announce/2025/09/msg00016.html","hostname":"lists.debian.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2025-9288","label":"ubuntu.com/security/CVE-2025-9288","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-9288","label":"www.cve.org/CVERecord?id=CVE-2025-9288","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-7778-1","label":"ubuntu.com/security/notices/USN-7778-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-9288","label":"security-tracker.debian.org/tracker/CVE-2025-9288","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://npmjs.com/sha.js","label":"npmjs.com/sha.js","hostname":"npmjs.com","tags":["WEB"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9288.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9288.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9288","label":"nvd.nist.gov/vuln/detail/CVE-2025-9288","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/browserify/sha.js","label":"github.com/browserify/sha.js","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/browserify/sha.js/commit/f2a258e9f2d0fcd113bfbaa49706e1ac0d979ba5","label":"github.com/browserify/sha.js/commit/f2a258e9f2d0fcd113bfbaa49706e1ac0d979ba5","hostname":"github.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-85X6-MGF6-G6P2","CGA-P559-8M48-9HCQ","CGA-XC4V-6396-79V2"]},"timeline":[{"kind":"published","date":"2025-08-20T21:59:44.728Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-11-03T18:14:17.994Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:57:35.169Z","stale":false,"partial":false}}