Description
Affected versions of generate-password generate random values that are biased towards certain characters depending on the chosen character sets. This may result in guessable passwords.
Recommendation
Update the generate-password package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.4.1
- Patched version(s): 1.4.1
References
Related Issues
- mongosh vulnerable to local privilege escalation - CVE-2025-1756
- Elliptic's EDDSA missing signature length check - CVE-2024-42459
- Nuxt Devtools has a Path Traversal: '../filedir - CVE-2024-23657
- Incorrect default cookie name and recommendation - Vulnerability
- Tags:
- npm
- generate-password
Anything's wrong? Let us know Last updated on January 09, 2023