Known vulnerabilities in crypto-js

Vendor: brix
Software: crypto-js
Software CPE: cpe:2.3:a:brix:crypto-js:*:*:*:*:*:*:*:*
Website: https://github.com/brix
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting crypto-js crypto-js is affected by 3 known vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141233 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2026-71851		 CWE-338 High
No
No
 4.0.0 07.08.2026 SB2026080726
#VU83993 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-46233		 CWE-327 Medium
No
No
 4.2.0 08.12.2023 SB2023120805
SB2023121211
SB2023122252
and 6 more
#VU83992 - Use of Insufficiently Random Values
CVE-2020-36732		 CWE-330 Medium
No
No
 3.2.1 08.12.2023 SB2023120804
SB2024030742
SB2025091116
and 26 more