Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2020/09/01 9:22 p.m.56 views

Entropy Backdoor in text-qrcode

All versions of text-qrcode contain malicious code that overwrites the randomBytes method for the crypto module with a function that generates weak entropy. Instead of generating 32 bytes, the infected randomBytes will generate 3 bytes of entropy and hash them, resulting in a 32 byte value being...

1.4AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder