Skip to content
OpenAdvisories

Vendor

simbo1905

1 known vulnerabilities.

Products

thinbus-srp-npm 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-54885

    Thinbus generates insufficient entropy: 252 bits vs minimum 256 bits

    Thinbus Javascript Secure Remote Password is a browser SRP6a implementation for zero-knowledge password authentication. In versions 2.0.0 and below, a protocol compliance bug causes the client to generate a fixed 252 bits of entropy instead of the intended bi…

    simbo1905 thinbus-srp-npm thinbus-srp npm