CVE-2026-71851Published
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded fro…
Exact source revision recorded 25 Oct 2026 15:19:03 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-71851
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.