This pull request updates the crypto-js library in package.json to version 4.2.0.
This update addresses a critical security vulnerability found in the previous version related to the PBKDF2 function.
The older version defaulted to the SHA1 hash algorithm and used only a single iteration for key derivation, significantly weakening the cryptographic strength.
This pull request updates the
crypto-js
library inpackage.json
to version 4.2.0.This update addresses a critical security vulnerability found in the previous version related to the PBKDF2 function.
The older version defaulted to the SHA1 hash algorithm and used only a single iteration for key derivation, significantly weakening the cryptographic strength.