cve/2020/CVE-2020-36732.md
2024-05-25 21:48:12 +02:00

683 B

CVE-2020-36732

Description

The crypto-js package before 3.2.1 for Node.js generates random numbers by concatenating the string "0." with an integer, which makes the output more predictable than necessary.

POC

Reference

No PoCs from references.

Github