GHSA-5wg4-74h6-q47vMediumCVSS 5.9

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

Published
August 20, 2020
Last Modified
February 1, 2023

🔗 CVE IDs covered (1)

CVE-2020-7689 →

📋 Description

In bcrypt (npm package) before version 5.0.0, data is truncated wrong when its length is greater than 255 bytes.

🎯 Affected products1

  • npm/bcrypt:< 5.0.0

🔗 References (6)