Lucene search
+L

1 matches found

OSV
OSV
added 2020/09/01 9:22 p.m.14 views

GHSA-H5VJ-F7R9-W564 Entropy Backdoor in text-qrcode

All versions of text-qrcode contain malicious code that overwrites the randomBytes method for the crypto module with a function that generates weak entropy. Instead of generating 32 bytes, the infected randomBytes will generate 3 bytes of entropy and hash them, resulting in a 32 byte value being...

9.8CVSS7.2AI score
SaveExploits0References1
Rows per page
Query Builder