-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
JavaScriptJavaScript| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| blinksocks | npm | <= 3.3.8 |
Miggo AIRoot Cause AnalysisThe vulnerability documentation explicitly identifies two issues in ssr-auth-chain.js: 1) Use of non-random IVs at line 163 (CBC/CFB modes) violating CWE-329, and 2) Use of RC4 algorithm at lines 173/278/391/436 (CWE-327). These functions directly implement cryptographic operations with known insecure patterns. While exact function names aren't provided, the line numbers and context indicate these are core encryption routines handling sensitive data flow.