cryptojs vulnerabilities (Debian)

3 vulnerabilities.

• cryptojs Debian crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain CVE-2026-71851 Public exploitFix available 9.0 CriticalAugust 7, 2026
• cryptojs Debian crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CVE-2023-46233 Fix available 9.1 CriticalOctober 25, 2023
• cryptojs Debian crypto-js uses insecure random numbers CVE-2020-36732 Fix available 5.3 MediumJune 12, 2023