Homepage

crypto-js vulnerabilities

JavaScript library of crypto standards.

  • latest version

    4.2.0

  • latest non vulnerable version

    4.2.0

  • first published

    12 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View crypto-js package health on Snyk Advisor  (opens in a new tab)
    • Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the crypto-js package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Use of Weak Hash

    <4.2.0
    • M
    Insecure Randomness

    >=3.2.0 <3.2.1

    Package versions

    20 VERSIONS IN TOTAL See all versions
    versionpublisheddirect vulnerabilities
    4.2.024 Oct, 2023
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    4.1.122 Jul, 2021
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    4.1.022 Jul, 2021
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    4.0.012 Feb, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.3.012 Feb, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.2.111 Feb, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.2.010 Feb, 2020
    • 0
      C
    • 1
      H
    • 1
      M
    • 0
      L
    3.1.9-114 Dec, 2016
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.1.827 Oct, 2016
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    3.1.77 Oct, 2016
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L