All 2 CVE vulnerabilities found in crypto-js, with AI-generated Chinese analysis, references, and POCs.
Vendor: brix
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71851 | crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain CWE-331 | 9.0 | Critical | 2026-08-07 |
| CVE-2023-46233 | crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CWE-328 | 9.1 | Critical | 2023-10-25 |
All 2 known CVE vulnerabilities affecting crypto-js with full Chinese analysis, references, and POCs where available.