npm/simple-crypto-js: medium 5.9

Insecure Cryptography Algorithm in simple-crypto-js

Action: Upgrade simple-crypto-js to 2.3.0 or later.

npm i simple-crypto-js@2.3.0

Affected

Fixed versions

Sources

• osv: GHSA-5v7r-jg9r-vq44
• https://github.com/danang-id/simple-crypto-js/issues/12
• https://github.com/danang-id/simple-crypto-js/pull/17
• https://github.com/danang-id/simple-crypto-js/commit/416584369de1dad9b21ac3fe85df0b71cf5718b2
• https://github.com/danang-id/simple-crypto-js
• https://robertheaton.com/2013/07/29/padding-oracle-attack
• https://snyk.io/vuln/SNYK-JS-SIMPLECRYPTOJS-544027

published 2020-09-03T21:19:46Z · modified 2021-09-29T20:08:01Z · JSON