Crypto-Js · Crypto-Js · CVE-2020-36732
**Name of the Vulnerable Software and Affected Versions**
crypto-js versions prior to 3.2.1
**Description**
The issue concerns the generation of random numbers in the crypto-js package. Specifically, it concatenates the string "0." with an integer, making the output more predictable than necessary.
**Recommendations**
For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.