admingitea/api-enhanced
1
0
Fork 0
mirror of https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced.git synced 2026-10-20 22:51:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: V-001 security vulnerability

Browse Source 
Automated security fix generated by OrbisAI Security
This commit is contained in:
anupamme
2026-08-02 08:35:02 +00:00
parent a79a2d9ef6
commit 9214cb945f
2 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
module/decrypt.js
+1 -1
View File
@@ -48,7 +48,7 @@ module.exports = async (query, request) => {
case 'linuxapi': {
if (isReq) {
const pureHex = data.replace(/\s/g, '')
const decrypted = aesDecrypt(pureHex, linuxapiKey, '', 'hex')
const decrypted = aesDecrypt(pureHex, 'ecb', linuxapiKey, '', 'hex')
result = JSON.parse(decrypted.toString(CryptoJS.enc.Utf8))
} else {
result = typeof data === 'string' ? JSON.parse(data) : data