BR
Vendor
Browserify
4
CVEs
0
On KEV
0
New 30D
Products
BR7.5
Browserify-sign
Browserify
1 CVEs0 on KEV0 new
CI9.1
Cipher-base
Browserify
1 CVEs0 on KEV0 new
PB3.7
pbkdf2
browserify
1 CVEs0 on KEV0 new
SH9.1
Sha.js
Browserify
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102414 | PB pbkdf2 browserify | 3.7 | Sep 29 | pbkdf2 rehashes long passwords on every iteration, enabling denial of service |
| CVE-2025-9288 | SH Sha.js Browserify | 9.1 | Aug 20 | Missing type checks leading to hash rewind and passing on crafted data |
| CVE-2025-9287 | CI Cipher-base Browserify | 9.1 | Aug 20 | Missing type checks leading to hash rewind and passing on crafted data |
| CVE-2023-46234 | BR Browserify-sign Browserify | 7.5 | Oct 26 | browserify-sign is a package to duplicate the functionality of node's crypto public key functions, much of this is based on Fedor Indutny's work on indutny/tls.js |