TI-2023-24860 CVE-2023-46233 · GHSA-xwcq-pm8m-c4vf
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Priority MEDIUM 48
crypto-js is a JavaScript library of crypto standards.
Vulnerabilities
2 records
TI-2020-18903 CVE-2020-36732 · GHSA-3w3w-pxmm-2w2j
The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating…
Priority LOW 32
The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.