Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-rg76-677x-56q9
  • npm/crypto-js
 crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain 07 Aug
  • Fix available
  • Severity - 9.0 (Critical)
MAL-2026-2306
  • npm/plain-crypto-js
 Malicious code in plain-crypto-js (npm) 31 Mar
  • No fix available
GHSA-xwcq-pm8m-c4vf
  • npm/crypto-js
 crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard 25 Oct 2023
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-3w3w-pxmm-2w2j
  • npm/crypto-js
 crypto-js uses insecure random numbers 12 Jun 2023
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-5v7r-jg9r-vq44
  • npm/simple-crypto-js
 Insecure Cryptography Algorithm in simple-crypto-js 03 Sep 2020
  • Fix available
  • Severity - 5.9 (Medium)