Medium severity5.3NVD Advisory· Published Jun 4, 2018· Updated Jun 17, 2026
CVE-2017-16028
CVE-2017-16028
Description
react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
randomaticnpm | < 3.0.0 | 3.0.0 |
Affected products
3- cpe:2.3:a:randomatic_project:randomatic:*:*:*:*:*:node.js:*:*Range: <3.0.0
- HackerOne/react-native-meteor-oauth node modulev5Range: All versions
Patches
Vulnerability mechanics
References
6- nodesecurity.io/advisories/157nvdPatchThird Party Advisory
- github.com/advisories/GHSA-6g33-f262-xjp4ghsaADVISORY
- github.com/tableflip/react-native-meteor-oauth/blob/a7eb738b74c469f5db20296b44b7cae4e2337435/src/meteor-oauth.jsnvdThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2017-16028ghsaADVISORY
- github.com/jonschlinkert/randomatic/commit/4a526959b3a246ae8e4a82f9c182180907227fe1ghsaWEB
- www.npmjs.com/advisories/157ghsaWEB
News mentions
0No linked articles in our index yet.