USN-6753-1: CryptoJS vulnerability

Thomas Neil James Shadwell discovered that CryptoJS was using an insecure
cryptographic default configuration. A remote attacker could possibly use
this issue to expose sensitive information.

attacker configuration cryptographic default expose information insecure issue james neil sensitive sensitive information thomas usn vulnerability