Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

npm

crypto-js

npm

JavaScript library of crypto standards.

View on github.com · View on npmjs.org

Security Advisories for crypto-js in npm

Critical
9 days ago

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain GSA_kwCzR0hTQS1yZzc2LTY3N3gtNTZxOc4ABiBX

npm crypto-js
Critical
almost 3 years ago

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard GSA_kwCzR0hTQS14d2NxLXBtOG0tYzR2Zs4AA2sP

npm crypto-js
Moderate
about 3 years ago

crypto-js uses insecure random numbers GSA_kwCzR0hTQS0zdzN3LXB4bW0tMncyas4AAzxu

npm crypto-js

Filter by Severity

Critical 2 Moderate 1