CyberSecBulletin

Brix vulnerabilities

We track 2 vulnerabilities in Brix products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 7, 2026.

2vulnerabilities
2critical
0high
0exploited
9.1average CVSS score

Latest Brix vulnerabilities

  • 9.0 Critical severity

    crypto-js: Insufficient Entropy

    CVE-2026-71851Brix

    crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random() using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random(), ins

  • 9.1 Critical severity

    crypto-js: Use of a Broken or Risky Cryptographic Algorithm

    CVE-2023-46233Brix

    crypto-js is a JavaScript library of crypto standards. Prior to version 4.2.0, crypto-js PBKDF2 is 1,000 times weaker than originally specified in 1993, and at least 1,300,000 times weaker than current industry standard. This is because it both defaults to SHA