[Snyk] Upgrade crypto-js from 4.1.1 to 4.2.0

[BeyondTheKeys]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade crypto-js from 4.1.1 to 4.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 21 days ago, on 2023-10-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Use of Weak Hash SNYK-JS-CRYPTOJS-6028119	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: crypto-js

• 4.2.0 - 2023-10-24
  No content.
• 4.1.1 - 2021-07-22
  No content.

from crypto-js GitHub release notes

Commit messages

Package name: crypto-js

• ac34a5a Merge branch 'release/4.2.0' into develop
• d5af3ae Update release notes.
• 9496e07 Bump version.
• 421dd53 Change default hash algorithm and iteration's for PBKDF2 to prevent weak security by using the default configuration.
• d1f4f4d Update grunt.
• 1da3dab Discontinued
• 4dcaa7a Merge pull request #380 from Alanscut/dev
• 762feb2 chore: rename BF to Blowfish
• fb81418 feat: blowfish support
• c8a2312 Merge pull request #379 from Alanscut/dev
• 09ee2ab feat: custom KDF hasher
• 0229694 Merge branch 'develop' of ssh://github.com/brix/crypto-js into develop
• df09288 Remove travis status, as travis is not used anymore.
• 6703e79 Merge pull request #285 from paulmwatson/develop
• d50d964 No es default param.
• 4840268 Merge pull request #378 from Elity/develop
• f92ddc0 Merge pull request #377 from Alanscut/dev
• fe84967 fix: es-check error
• ca7384f test: add test case,using salt in the config
• dcc3848 fix:The "cfg.salt" parameter don't work
• ecfe2e4 Update dev dependencies.
• a4dac50 Merge branch 'release/4.1.1' into develop
• 71ad0bc Minor typo fix: varialbes => variables

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs