Critical DLA-4291-1 1 CVE

node-cipher-base - security update

Published Sep 3, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	node-cipher-base	1.0.4-4+deb11u1

Vulnerabilities 1

Critical 9.1

CVE-2025-9287

Missing type checks leading to hash rewind and passing on crafted data

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.

opensearch-dashboards-3 opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability opensearch-dashboards-3-alerting-dashboards-plugin Debian Ubuntu Wolfi npm

Aug 20, 2025