by @LeSuisse Activity log
- Created automatic suggestion
-
@LeSuisse
removed
12 packages
- speech-denoiser
- openimagedenoise
- terraform-providers.deno
- python312Packages.denonavr
- python313Packages.denonavr
- haskellPackages.pandoc-sidenote
- terraform-providers.denoland_deno
- gnomeExtensions.denon-avr-controler
- python312Packages.bnunicodenormalizer
- python313Packages.bnunicodenormalizer
- vscode-extensions.denoland.vscode-deno
- home-assistant-component-tests.denonavr
- @LeSuisse accepted
- @LeSuisse published on GitHub
Deno node:crypto doesn't finalize cipher
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Before 2.6.0, node:crypto doesn't finalize cipher. The vulnerability allows an attacker to have infinite encryptions. This can lead to naive attempts at brute forcing, as well as more refined attacks with the goal to learn the server secrets. This vulnerability is fixed in 2.6.0.
Affected products
deno
- ==< 2.6.0
Package maintainers
-
@06kellyjac Jack <hello+nixpkgs@j-k.io>
-
@ofalvai Olivér Falvai <ofalvai@gmail.com>