Skip to content

Need a fix for CVE-2023-46809 #305

Open
@cjbathras

Description

@cjbathras

When upgrading to Node 20, I can no longer use jsencrypt because it uses PKCS1 padding. Node is preventing using PKCS1 padding because of CVE-2023-46809. It would be great if the padding method was changed or if there was an option to use a different padding scheme. If there's a way to get around this that I haven't uncovered, I'd love to hear about it.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions