Critical DSA-5986-1 1 CVE

node-cipher-base - security update

Published Aug 26, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	node-cipher-base	1.0.4-6+deb12u1
Debian · 13	node-cipher-base	1.0.4-6+deb13u1

Vulnerabilities 1

Critical 9.1

CVE-2025-9287

Missing type checks leading to hash rewind and passing on crafted data

Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.

opensearch-dashboards-3 opensearch-dashboards-3-dashboards-reporting opensearch-dashboards-3-dashboards-observability opensearch-dashboards-3-alerting-dashboards-plugin Debian Ubuntu Wolfi npm

Aug 20, 2025