Description
Renato v0.17.0 employs weak password complexity requirements, allowing attackers to crack user passwords via brute-force attacks.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | raneto | < 0.17.1 | 0.17.1 | GHSA-7942-2fx8-qhpf |
Critical · 9.8
CVE-2022-35143
EUVD-2022-6502GHSA-7942-2fx8-qhpf
Raneto v0.17.0 employs weak password complexity requirements
Published Aug 4, 2022 · Updated Aug 3, 2024 · Assigned by mitre