Avoid weak hash algorithm from CryptoJS

This page is not yet available in Spanish. We are working on its translation.
If you have any questions or feedback about our current translation project, feel free to reach out to us!

Metadata

ID: typescript-node-security/crypto-avoid-weak-hash

Language: TypeScript

Severity: Warning

Category: Security

CWE: 328

Description

Use of insecure hash functions like MD5 or SHA1 can expose your application to vulnerabilities.

Learn More

Non-Compliant Code Examples

const hash = CryptoJS.MD5("Message", "Secret Passphrase");
const hash = CryptoJS.SHA1("Message", "Secret Passphrase");
const hash = CryptoJS.HmacMD5("Message", "Secret Passphrase");
https://static.datadoghq.com/static/images/logos/github_avatar.svg https://static.datadoghq.com/static/images/logos/vscode_avatar.svg jetbrains

Seamless integrations. Try Datadog Code Analysis