Browserify - vulnerabilities (CVEs)

4 CVEs in 4 products, 0 in the last 30 days, newest from 2026-09-29.

Products

• Browserify-sign - 1 CVEs
• Cipher-base - 1 CVEs
• Pbkdf2 - 1 CVEs
• Sha.js - 1 CVEs

Newest CVEs of Browserify

• CVE-2026-102414 - CVSS 6.3 (medium), 2026-09-29: pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer…
• CVE-2025-9287 - CVSS 9.1 (critical), 2025-08-20: Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
• CVE-2025-9288 - CVSS 9.1 (critical), 2025-08-20: Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects sha.js: through 2.4.11.
• CVE-2023-46234 - CVSS 7.5 (high), 2023-10-26: browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on…