CVE-2017-16028: Randomatic Project Randomatic

Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days.

react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).

Affected products

• Randomatic Project Randomatic: before 3.0.0 (fixed in 3.0.0)

Published 2018-06-04. Last modified 2026-06-17.