Skip to content
OpenAdvisories

Package · npm

text-qrcode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    GHSA-h5vj-f7r9-w564

    Entropy Backdoor in text-qrcode

    All versions of `text-qrcode` contain malicious code that overwrites the `randomBytes` method for the `crypto` module with a function that generates weak entropy. Instead of generating 32 bytes, the infected randomBytes will generate 3 bytes of entropy and ha…

    text-qrcode npm