react-native-sensitive-info icon indicating copy to clipboard operation
react-native-sensitive-info copied to clipboard

Static Values for Cryptography Which Exposes Data to Easy Decryption

Open nidheeshsundar07 opened this issue 3 years ago • 3 comments

The package is using static values as seeds for encryption. This means that any attacker who sees those static seeds will be able to easily decrypt that data. If the data being encrypted is sensitive information, the attacker will be able to see and exploit the information.

ios vulnerability

nidheeshsundar07 avatar Apr 21 '22 13:04 nidheeshsundar07

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar May 31 '22 02:05 stale[bot]

Can you link to a line in the repo where you see this hardcoded? Cause I don’t see anything like this?

losh11 avatar Jul 05 '22 07:07 losh11

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

stale[bot] avatar Aug 12 '22 03:08 stale[bot]