DeviceFarmer stf uses DES-ECB

Description

DeviceFarmer stf v3.6.6 suffers from Use of a Broken or Risky Cryptographic Algorithm.

Recommendation

No fix is available yet. Followings are affected versions:

• <= 3.6.6

References

• GHSA-7xm8-wjq7-88r5
• CVE-2023-51839
• CWE-327
• CAPEC-310
• OWASP 2021-A2
• OWASP 2021-A6

Related Issues

• Gatsby develop server has Local File Inclusion vulnerability - CVE-2023-34238
• Elliptic Uses a Cryptographic Primitive with a Risky Implementation - CVE-2025-14505
• plotly.js prototype pollution vulnerability - CVE-2023-46308
• Follow Redirects improperly handles URLs in the url.parse() function - CVE-2023-26159

Tags:

npm

@devicefarmer/stf