CVE-2026-71851
1 advisory.
npm/crypto-js CVE-2026-71851: critical 9
crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
Action: Upgrade crypto-js to 4.0.0 or later.
npm i crypto-js@4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-rg76-677x-56q9
- https://github.com/brix/crypto-js/security/advisories/GHSA-rg76-677x-56q9
- https://github.com/brix/crypto-js/commit/b405ff597fb3ac76a7bdfbc72dca10ba1079b1d5
- https://github.com/brix/crypto-js
- https://www.coinspect.com/blog/ill-bloom-investigation
CVE-2026-71851 · published · modified · JSON