The crypto-js package before 3.2.1... CVE-2020-36732

- AV AC AU C I A
发布: 2023-06-12
修订: 2024-11-21

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息