crypto-js
npm · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard | crypto-js.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet | npmRed Hat | Critical | Fix reported | |
| crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain | crypto-js | npm | Critical | Fix reported | |
| crypto-js uses insecure random numbers | crypto-js | npm | Medium | Fix reported |