{"action":"Upgrade cryptiles to 3.1.3 or later.","affected":[{"fixed":"4.1.2","introduced":"4.0.0"},{"fixed":"3.1.3","introduced":"3.1.0"}],"component":"cryptiles","cve_ids":["CVE-2018-1000620"],"ecosystem":"npm","epss":0.01681,"exploited":false,"fixed_versions":["4.1.2","3.1.3"],"ghsa_id":"GHSA-rq8g-5pc5-wrhr","id":"tcs_01M5KG9MYGS1WMF0NS7AFDVTHR","modified_at":"2026-06-08T16:00:10.048324137Z","published_at":"2018-09-11T18:22:50Z","references":["https://osv.dev/vulnerability/GHSA-rq8g-5pc5-wrhr","https://nvd.nist.gov/vuln/detail/CVE-2018-1000620","https://github.com/hapijs/cryptiles/issues/34","https://github.com/hapijs/cryptiles/issues/35","https://github.com/hapijs/cryptiles/commit/6bdcd0f6ee8ade96e7b30350bad39ee0c2ef0f9b","https://github.com/hapijs/cryptiles/commit/9332d4263a32b84e76bf538d7470d01ea63fa047","https://github.com/hapijs/cryptiles/commit/cb6bd642816e0cb8341d2b3896fd9e7c57e94f56","https://github.com/hapijs/cryptiles","https://github.com/nodejs/security-wg/blob/master/vuln/npm/476.json","https://www.npmjs.com/advisories/1464","https://www.npmjs.com/advisories/720"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rq8g-5pc5-wrhr","url":"https://osv.dev/vulnerability/GHSA-rq8g-5pc5-wrhr"}],"summary":"Insufficient Entropy in cryptiles"}