kura52 / sushi-browser

Sushi Browser is the next generation browser which mounts the multi-panel and the video support function and so on. Its goal is to be as fantastic as sushi. :sushi:
https://sushib.me
GNU General Public License v3.0
126 stars 12 forks source link

Automated Issue: randomDigits() generates biased random digits #56

Open PoorPocketsMcNewHold opened 5 years ago

PoorPocketsMcNewHold commented 5 years ago

This has been an automatic security issue that Snyk found, in one of my forks of the projects. I let you check it out more, I suppose it's due to the rest of the crypto wallet from the Brave browser base that hasn't been updated. If it's that and isn't obviously used by the browser, This should be fine, but still would be another reason to clean a bit the old dependencies. https://app.snyk.io/vuln/npm:cryptiles:20180710 https://github.com/hapijs/cryptiles/issues/34 https://github.com/hapijs/cryptiles/commit/9332d4263a32b84e76bf538d7470d01ea63fa047