ajinabraham.njsscan.crypto_node.node_md5

profile photo of ajinabrahamajinabraham
Author
1,155
Download Count*
GPLv3
License

MD5 is a a weak hash which is known to have collision. Use a strong hashing function.

Run Locally

Run in CI

Semgrep CI docs

Defintion

Edit RuleView Source
Open in Playground 
rules:
  - id: node_md5
    patterns:
      - pattern: |
          $X.createHash("md5")
    message: MD5 is a a weak hash which is known to have collision. Use a strong
      hashing function.
    languages:
      - javascript
    severity: WARNING
    metadata:
      owasp-web: a9
      cwe: cwe-327
      license: LGPL-3.0-or-later