crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

Description

No description available.

Recommendation

Update the crypto-js package to the latest compatible version. Followings are version details:

Affected version(s): < 4.2.0
Patched version(s): 4.2.0

References

Could your website be exposed too?

SmartScanner can check your website for crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard and gives you actionable findings to investigate.

Start a free scan

Related Issues

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain - CVE-2026-71851
crypto-js uses insecure random numbers - CVE-2020-36732
Making all attributes on a content-type public without noticing it - @strapi/utils - CVE-2023-34093
`chainId` may be outdated if user changes chains as part of connection in @web3-react - @web3-react/metamask - CVE-2023-30543

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated February 01, 2024