Количество 3
Количество 3
CVE-2020-36732
The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.
CVE-2020-36732
The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.
GHSA-3w3w-pxmm-2w2j
crypto-js uses insecure random numbers
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2020-36732 The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад | |
CVE-2020-36732 The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary. | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад | |
GHSA-3w3w-pxmm-2w2j crypto-js uses insecure random numbers | CVSS3: 5.3 | 1% Низкий | больше 2 лет назад |
Уязвимостей на страницу