{"action":"Upgrade crypto-es to 2.1.0 or later.","affected":[{"fixed":"2.1.0","introduced":"0"}],"component":"crypto-es","cve_ids":["CVE-2023-46133"],"ecosystem":"npm","epss":0.00541,"exploited":false,"fixed_versions":["2.1.0"],"ghsa_id":"GHSA-mpj8-q39x-wq5h","id":"tcs_01M5KG1AQWZH2V4P9D989E6BYA","modified_at":"2026-09-10T03:50:03.878028110Z","published_at":"2023-10-25T21:14:44Z","references":["https://osv.dev/vulnerability/GHSA-mpj8-q39x-wq5h","https://github.com/entronad/crypto-es/security/advisories/GHSA-mpj8-q39x-wq5h","https://nvd.nist.gov/vuln/detail/CVE-2023-46133","https://github.com/entronad/crypto-es/commit/d506677fae3d03a454b37ad126e0c119d416b757","https://github.com/entronad/crypto-es"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-mpj8-q39x-wq5h","url":"https://osv.dev/vulnerability/GHSA-mpj8-q39x-wq5h"}],"summary":"crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard"}