CVE-2025-54885
1 advisory.
npm/thinbus-srp CVE-2025-54885: medium
The Thinbus Javascript Secure Remote Password (SRP) Client Generates Fewer Bits of Entropy Than Intended
Action: Upgrade thinbus-srp to 2.0.1 or later.
npm i thinbus-srp@2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.1 | - |
Fixed versions
| 2.0.1 |
Sources
- osv: GHSA-8q6v-474h-whgg
- https://github.com/simbo1905/thinbus-srp-npm/security/advisories/GHSA-8q6v-474h-whgg
- https://nvd.nist.gov/vuln/detail/CVE-2025-54885
- https://github.com/simbo1905/thinbus-srp-npm/issues/28
- https://github.com/simbo1905/thinbus-srp-npm/pull/30/commits/4aeaea2366e090765a8204059c7bcf3616438d31
- https://github.com/simbo1905/thinbus-srp-npm/commit/aa7064c1db7294ce867e9bc92f26fa6c71a5a2cb
- https://github.com/simbo1905/thinbus-srp-npm
CVE-2025-54885 · published · modified · JSON