react-native-sensitive-info
react-native-sensitive-info copied to clipboard
Static Values for Cryptography Which Exposes Data to Easy Decryption
The package is using static values as seeds for encryption. This means that any attacker who sees those static seeds will be able to easily decrypt that data. If the data being encrypted is sensitive information, the attacker will be able to see and exploit the information.

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Can you link to a line in the repo where you see this hardcoded? Cause I don’t see anything like this?
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.