Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-8319 EUVD-2018-0466GHSA-qg3g-2mgh-33j8

Sensitive Data Exposure in msrcrypto

Published Jul 11, 2018 · Updated Aug 5, 2024 · Assigned by microsoft

Description

A Security Feature Bypass vulnerability exists in MSR JavaScript Cryptography Library that is caused by incorrect arithmetic computations, aka "MSR JavaScript Cryptography Library Security Feature Bypass Vulnerability." This affects Microsoft Research JavaScript Cryptography Library.

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Research JavaScript Cryptography Library Microsoft Research JavaScript Cryptography Library —

Affected packages

EcosystemPackageAffectedFixedRecord
npm msrcrypto < 1.4.1 1.4.1 GHSA-qg3g-2mgh-33j8

References