Avoid weak hash algorithm from CryptoJS

Metadata

ID: typescript-node-security/crypto-avoid-weak-hash

Language: TypeScript

Severity: Warning

Category: Security

Description

Use of insecure hash functions like MD5 or SHA1 can expose your application to vulnerabilities.

Learn More

Non-Compliant Code Examples

const hash = CryptoJS.MD5("Message", "Secret Passphrase");
const hash = CryptoJS.SHA1("Message", "Secret Passphrase");
const hash = CryptoJS.HmacMD5("Message", "Secret Passphrase");