Skip to content
OpenAdvisories

Package · npm

parsel

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-q643-w9jp-q2qg

    Hardcoded Initialization Vector in parsel

    All versions of `parsel` have a default hardcoded initialization vector. In cases where the IV is not provided, the package defaults to a hardcoded IV which renders the cipher vulnerable to chosen plaintext attacks. ## Recommendation The package is deprecated…

    parsel npm