Product · HackerOne

react-native-meteor-oauth node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2017-16028

Cryptographically Weak PRNG in randomatic

react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).

HackerOne react-native-meteor-oauth node module randomatic npm

Jun 4, 2018