Search CVE reports
1 – 2 of 2 results
CVE-2023-46233
Medium prioritySome fixes available 4 of 7
crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is...
1 affected packages
cryptojs
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| cryptojs | Vulnerable | Fixed | Fixed | Fixed | Fixed |
CVE-2020-36732
Medium priority
Not affected
The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.
1 affected packages
cryptojs
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| cryptojs | — | Not affected | Not affected | Not affected | Not affected |