Skip to content
OpenAdvisories
Medium · 5.3 CVE-2017-16028 EUVD-2018-0518GHSA-6g33-f262-xjp4

Cryptographically Weak PRNG in randomatic

Published Jun 4, 2018 · Updated Sep 17, 2024 · Assigned by hackerone

Description

react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).

Affected products

VendorProductAffectedFixed
HackerOne react-native-meteor-oauth node module All versions —

Affected packages

EcosystemPackageAffectedFixedRecord
npm randomatic < 3.0.0 3.0.0 GHSA-6g33-f262-xjp4

Advisories 1

References