GitHub Advisoryadvisory · Packagist

GHSA-fgrx-4637-fcf5 fuel/core Crypt encryption compromised.

MEDIUM Published 2024-05-15 Modified 2024-05-15 Official page ↗

Ecosystem: Packagist
Packages: fuel/core
Severity: Moderate
Weaknesses: CWE-327
Reviewed: 2024-05-15

Affected packages

• Packagist fuel/core: < 1.8.1 → fixed in 1.8.1

Description

In fuel/core versions pior to 1.8.1, with the right knowledge, code, and GPU calculation power, Crypt encryption can be broken in minutes.

Related

Weakness · CWE (1)

CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References