brix/crypto-js Security Advisories | GitStock

critical2026-08-07

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

GHSA-rg76-677x-56q9 · CVE-2026-71851

critical2023-10-25

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

GHSA-xwcq-pm8m-c4vf · CVE-2023-46233

medium2023-06-12

crypto-js uses insecure random numbers

GHSA-3w3w-pxmm-2w2j · CVE-2020-36732