CVE-2025-9287: Browserify Cipher-Base

Critical severity, CVSS 9.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.

Affected products

• Browserify Cipher-Base: up to and including 1.0.4

Published 2025-08-20. Last modified 2026-06-17.