Skip to content
OpenAdvisories
Critical DLA-3669-1 1 CVE

cryptojs - security update

Published Nov 27, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 cryptojs 3.1.2+dfsg-2+deb10u1

Vulnerabilities 1

  • Critical 9.1
    CVE-2023-46233

    crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

    crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SH…

    brix crypto-js crypto-js cryptojs Debian Ubuntu npm