DeviceFarmer stf uses DES-ECB

Description

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 3.6.6

References

• GHSA-7xm8-wjq7-88r5
• CVE-2023-51839
• CWE-327
• CAPEC-310
• OWASP 2021-A2
• OWASP 2021-A6

Related Issues

• @hpke/core reuses AEAD nonces - CVE-2025-64767
• Spoofing attack in swagger-ui - CVE-2018-25031
• MailDev Remote Code Execution - CVE-2024-27448
• vxe-table prototype pollution - CVE-2024-57080

Tags:

npm

@devicefarmer/stf