sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0, the default no-argument sm2.generateKeyPairHex() path in...

CVE-2026-73567

sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4. Prior to 0.5.0,

历史摘要 · 未重新核验 · NVD

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an...

CVE-2026-18611

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwor...

CVE-2026-18611

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive

历史摘要 · 未重新核验 · NVD

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of th...

CVE-2026-71851

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt

历史摘要 · 未重新核验 · NVD

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

CVE-2026-71851

### Summary `CryptoJS.lib.WordArray.random()` in affected versions is not a cryptographically secure random number gene

历史摘要 · 未重新核验 · GitHub Advisory

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

CVE-2026-71851

crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in Crypt

历史摘要 · 未重新核验 · OSV.dev

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

CVE-2026-9205

IBM Langflow OSS contains a weak cryptographic key derivation vulnerability in the ensure_fernet_key() function.

历史摘要 · 未重新核验 · NVD

sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock

## Summary `sm-crypto` (npm package **0.4.0**, the latest release, published 2026-01-20) generates SM2 private keys and

历史摘要 · 未重新核验 · GitHub Advisory

Persistent URL login keys were also generated using a non-cryptographic random generator with...

CVE-2026-64798

Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

历史摘要 · 未重新核验 · GitHub Advisory

Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

CVE-2026-64798

Persistent URL login keys were also generated using a non-cryptographic random generator with insufficient entropy.

历史摘要 · 未重新核验 · NVD

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API, a cryptographically insecure pseudo-random number generat...

CVE-2026-16615

A flaw was found in librest. The PKCE implementation for OAuth authorization uses the GRand function from the GLib API,

历史摘要 · 未重新核验 · NVD

ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The challenge value is generated using an insufficiently random ...

CVE-2026-8169

ExtremeXOS (EXOS) uses a challenge-response mechanism to authorize access to the privileged debug-mode function. The cha

历史摘要 · 未重新核验 · NVD

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back ...

CVE-2026-13577

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable. Dancer2::Cor

历史摘要 · 未重新核验 · NVD

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for...

CVE-2026-16235

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts. These versions use the built-

历史摘要 · 未重新核验 · NVD

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable

CVE-2026-13577

Dancer2 versions through 2.1.0 for Perl generate insecure session ids when CSPRNG modules are unavailable. Dancer2::Cor

历史摘要 · 未重新核验 · OSV.dev

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge text used for the CAPTCHA by sampling characters from an ...

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge

历史摘要 · 未重新核验 · NVD

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets

CVE-2026-13082

GD::SecurityImage versions through 1.75 for Perl use rand to generate secrets. The random method creates the challenge

历史摘要 · 未重新核验 · OSV.dev

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one...

CVE-2026-63089

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation

历史摘要 · 未重新核验 · GitHub Advisory

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation vulnerability that allows unauthenticated network attack...

CVE-2026-63089

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation

历史摘要 · 未重新核验 · NVD

WireGuard Easy Weak Token Generation Information Disclosure via OTL Route

CVE-2026-63089

WireGuard Easy through 15.3.0, fixed in commit 66b292b, contains a cryptographically weak one-time link token generation

历史摘要 · 未重新核验 · OSV.dev