crypto-js: crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard (critical). GHSA-xwcq-pm8m-c4vf, CVE-2023-46233.
osv.devquote checked
- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?