In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsThere is no fixed version for parsel
.
parsel is a library that allows you to encrypt and decrypt data with a given key.
Affected versions of this package are vulnerable to Insecure Encryption. It contains a weak key derivation function, in which a key of arbitrary length is run through one round of SHA256 to gain key material of the correct length. This allows for the use of weak key material without appropriate key stretching.