Avoid weak hash algorithm from CryptoJS


ID: javascript-node-security/crypto-avoid-weak-hash

Language: JavaScript

Severity: Warning

Category: Security


Use of insecure hash functions like MD5 or SHA1 can expose your application to vulnerabilities.

Learn More

Non-Compliant Code Examples

var hash = CryptoJS.MD5("Message", "Secret Passphrase");
var hash = CryptoJS.SHA1("Message", "Secret Passphrase");
var hash = CryptoJS.HmacMD5("Message", "Secret Passphrase");
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Analysis