Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-wqgx-4q47-j2w5

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wqgx-4q47-j2w5

Insecure Cryptography Algorithm in parsel All versions of `parsel` use an insecure cryptography algorithm. The package uses `aes-256-cbc` without integrity checks, which renders the ciphertext vulnerable to bit-flipping attacks. ## Recommendation The package is deprecated and will not be updated. Consider using an alternative package.

gitlab/npm/parsel/GMS-2020-425

Insecure Cryptography Algorithm in parsel All versions of `parsel` use an insecure cryptography algorithm. The package uses `aes-256-cbc` without integrity checks, which renders the ciphertext vulnerable to bit-flipping attacks. The package is deprecated and will not be updated. Consider using an alternative package.