pubnub Insufficient Entropy vulnerability

Description

Versions of the package pubnub before 7.4.0; all versions of the package com.pubnub:pubnub; versions of the package pubnub before 6.19.0; all versions of the package github.com/pubnub/go; versions of the package github.com/pubnub/go/v7 before 7.2.0; versions of the package pubnub before 7.3.0; versions of the package pubnub/pubnub before 6.1.

Recommendation

Update the pubnub package to the latest compatible version. Followings are version details:

• Affected version(s): < 7.4.0
• Patched version(s): 7.4.0

References

• GHSA-5844-q3fc-56rh
• security.snyk.io
• CVE-2023-26154
• CWE-331
• CAPEC-310
• OWASP 2021-A2
• OWASP 2021-A6

Related Issues

• CKEditor cross-site scripting vulnerability in AJAX sample - CVE-2023-4771
• google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability - CVE-2023-48711
• vxe-table Cross-site Scripting vulnerability - CVE-2023-1001
• Luxon Inefficient Regular Expression Complexity vulnerability - CVE-2023-22467

You might also like:

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

Tags:

npm

pubnub