Sign in Free assessment

browserify records

3 published records for vendor browserify.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

23
25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2025-9288No exploit	Missing type checks leading to hash rewind and passing on crafted databrowserify · sha.js · CWE-20 Pre-auth	Critical9.1	—	0.7%	Aug 20, 2025
36Monitor	CVE-2025-9287No exploit	Missing type checks leading to hash rewind and passing on crafted databrowserify · cipher-base · CWE-20 Pre-auth	Critical9.1	—	0.5%	Aug 20, 2025
30Monitor	CVE-2023-46234No exploit	browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attackbrowserify · browserify-sign · CWE-347 Pre-auth Weak crypto	High7.5	—	0.5%	Oct 26, 2023

CVE-2025-9288
36Monitor
Missing type checks leading to hash rewind and passing on crafted data
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
browserify · sha.jsAug 20, 2025
CVE-2025-9287
36Monitor
Missing type checks leading to hash rewind and passing on crafted data
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
browserify · cipher-baseAug 20, 2025
CVE-2023-46234
30Monitor
browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Weak crypto
browserify · browserify-signOct 26, 2023