Skip to content
OpenAdvisories

Package · npm

simple-crypto-js

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    GHSA-5v7r-jg9r-vq44

    Insecure Cryptography Algorithm in simple-crypto-js

    Versions of `simple-crypto-js` prior to 2.3.0 use AES-CBC with PKCS#7 padding, which is vulnerable to padding oracle attacks. This may allow attackers to break the encryption and access sensitive data. ## Recommendation Upgrade to version 2.3.0 or later.

    simple-crypto-js npm