A new Debian Linux update has been published: DLA 3669-1: cryptojs security update
A cryptojs security update has been released for Debian GNU/Linux 10 LTS to address an issue with the default PBKDF2 settings.Read more @ Linux Compatible