crypto-js vulnerabilities (npm)

3 vulnerabilities.

• crypto-js npm crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain CVE-2026-71851 Public exploitFix available 9.0 CriticalAugust 7, 2026
• crypto-js npm crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard CVE-2023-46233 Fix available 9.1 CriticalOctober 25, 2023
• crypto-js npm crypto-js uses insecure random numbers CVE-2020-36732 Fix available 5.3 MediumJune 12, 2023