{"action":"Upgrade crypto-js to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"3.2.0"}],"component":"crypto-js","cve_ids":["CVE-2020-36732"],"ecosystem":"npm","epss":0.01075,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-3w3w-pxmm-2w2j","id":"tcs_01M5KEYCZSMVQWFBHNZ9TVMEC2","modified_at":"2026-03-16T21:46:39.151944Z","published_at":"2023-06-12T03:30:17Z","references":["https://osv.dev/vulnerability/GHSA-3w3w-pxmm-2w2j","https://nvd.nist.gov/vuln/detail/CVE-2020-36732","https://github.com/brix/crypto-js/issues/254","https://github.com/brix/crypto-js/issues/256","https://github.com/brix/crypto-js/pull/257/commits/e4ac157d8b75b962d6538fc0b996e5d4d5a9466b","https://github.com/brix/crypto-js/commit/b405ff597fb3ac76a7bdfbc72dca10ba1079b1d5","https://github.com/brix/crypto-js/commit/e4ac157d8b75b962d6538fc0b996e5d4d5a9466b","https://github.com/brix/crypto-js","https://github.com/brix/crypto-js/compare/3.2.0...3.2.1","https://security.netapp.com/advisory/ntap-20230706-0003","https://security.snyk.io/vuln/SNYK-JS-CRYPTOJS-548472"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-3w3w-pxmm-2w2j","url":"https://osv.dev/vulnerability/GHSA-3w3w-pxmm-2w2j"}],"summary":"crypto-js uses insecure random numbers"}