Open stupidly-logical opened 4 weeks ago
crypto-js <4.2.0 Severity: critical crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard - https://github.com/advisories/GHSA-xwcq-pm8m-c4vf
No response
PR #3377
I have checked the following:
Describe the bug
npm audit report
crypto-js <4.2.0 Severity: critical crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard - https://github.com/advisories/GHSA-xwcq-pm8m-c4vf
.bru file to reproduce the bug
No response
Screenshots/Live demo link