VDB
Sign up
MEDIUM

GHSA-fgrx-4637-fcf5

fuel/core Crypt encryption compromised.

Quick fix

GHSA-fgrx-4637-fcf5 — fuel/core: upgrade to the fixed version with the command below.

composer require fuel/core:^1.8.1

Details

In fuel/core versions pior to 1.8.1, with the right knowledge, code, and GPU calculation power, Crypt encryption can be broken in minutes.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/fuel/core
Introduced in: 0Fixed in: 1.8.1
Fixcomposer require fuel/core:^1.8.1

References