GitHub Advisoryadvisory · npm

GHSA-pqj5-37xf-x5gc blinksocks has weak encryption algorithms

MEDIUM Published 2023-12-21 Modified 2023-12-21 Official page ↗
Aliases
CVE-2023-50481
Ecosystem
npm
Packages
blinksocks
Severity
Moderate
Reviewed
2023-12-21

Affected packages

• npm blinksocks: <= 3.3.8 (no fix yet)

Description

An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms in the component `/presets/ssr-auth-chain.js`.

Related

Alias · CVE (1)

  • CVE-2023-50481 An issue was discovered in blinksocks version 3.3.8, allows remote attackers to obtain sensitive information via weak encryption algorithms… vulnerability

References