Описание
otp-generator before v3.0.0 insecurely generates random one-time passwords
The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack.
Пакеты
Наименование
otp-generator
npm
Затронутые версииВерсия исправления
< 3.0.0
3.0.0
Связанные уязвимости
CVSS3: 6.5
nvd
больше 3 лет назад
The package otp-generator before 3.0.0 are vulnerable to Insecure Randomness due to insecure generation of random one-time passwords, which may allow a brute-force attack.