Critical severity9.1OSV Advisory· Published Aug 20, 2025· Updated Jun 17, 2026
CVE-2025-9287
CVE-2025-9287
Description
Improper Input Validation vulnerability in cipher-base allows Input Data Manipulation.This issue affects cipher-base: through 1.0.4.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
cipher-basenpm | < 1.0.5 | 1.0.5 |
Affected products
53v1.0.1, v1.0.2, v1.0.3, …+ 1 more
- (no CPE)range: v1.0.1, v1.0.2, v1.0.3, …
- cpe:2.3:a:browserify:cipher-base:*:*:*:*:*:node.js:*:*range: <=1.0.4
- osv-coords51 versionspkg:apk/chainguard/gitlab-rails-ce-18.1pkg:apk/chainguard/gitlab-rails-ce-18.11pkg:apk/chainguard/gitlab-rails-ce-19.0pkg:apk/chainguard/gitlab-rails-ce-19.1pkg:apk/chainguard/gitlab-rails-ce-fips-18.1pkg:apk/chainguard/gitlab-rails-ce-fips-18.11pkg:apk/chainguard/gitlab-rails-ce-fips-19.0pkg:apk/chainguard/opensearch-dashboards-3pkg:apk/chainguard/opensearch-dashboards-3-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-configpkg:apk/chainguard/opensearch-dashboards-3-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-3-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-3-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-3-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-3-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-3-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-3-fipspkg:apk/chainguard/opensearch-dashboards-3-fips-alerting-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-anomaly-detection-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-configpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-mapspkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-notificationspkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-observabilitypkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-query-workbenchpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-reportingpkg:apk/chainguard/opensearch-dashboards-3-fips-dashboards-search-relevancepkg:apk/chainguard/opensearch-dashboards-3-fips-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-3-fips-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-fips-security-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-index-management-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-ml-commons-dashboardspkg:apk/chainguard/opensearch-dashboards-3-security-analytics-dashboards-pluginpkg:apk/chainguard/opensearch-dashboards-3-security-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3pkg:apk/wolfi/opensearch-dashboards-3-alerting-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-anomaly-detection-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-configpkg:apk/wolfi/opensearch-dashboards-3-dashboards-mapspkg:apk/wolfi/opensearch-dashboards-3-dashboards-notificationspkg:apk/wolfi/opensearch-dashboards-3-dashboards-observabilitypkg:apk/wolfi/opensearch-dashboards-3-dashboards-query-workbenchpkg:apk/wolfi/opensearch-dashboards-3-dashboards-reportingpkg:apk/wolfi/opensearch-dashboards-3-dashboards-search-relevancepkg:apk/wolfi/opensearch-dashboards-3-index-management-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-ml-commons-dashboardspkg:apk/wolfi/opensearch-dashboards-3-security-analytics-dashboards-pluginpkg:apk/wolfi/opensearch-dashboards-3-security-dashboards-pluginpkg:npm/cipher-basepkg:rpm/opensuse/python-bqplot&distro=openSUSE%20Tumbleweed
< 18.1.6-r17+ 50 more
- (no CPE)range: < 18.1.6-r17
- (no CPE)range: < 18.11.6-r5
- (no CPE)range: < 19.0.3-r5
- (no CPE)range: < 19.1.1-r3
- (no CPE)range: < 18.1.6-r17
- (no CPE)range: < 18.11.6-r5
- (no CPE)range: < 19.0.3-r6
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 3.1.0-r4
- (no CPE)range: < 1.0.5
- (no CPE)range: < 0.12.45-12.1
Patches
Vulnerability mechanics
References
6- github.com/browserify/cipher-base/pull/23nvdIssue TrackingPatchWEB
- github.com/browserify/cipher-base/security/advisories/GHSA-cpq7-6gpm-g9rcnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-cpq7-6gpm-g9rcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-9287ghsaADVISORY
- github.com/browserify/cipher-base/commit/8fd136432ca298a664f5637629cf2b42a6c7f294ghsaWEB
- lists.debian.org/debian-lts-announce/2025/09/msg00005.htmlnvdWEB
News mentions
0No linked articles in our index yet.