MEDIUM5.9
GHSA-5wg4-74h6-q47v
Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
Quick fix
GHSA-5wg4-74h6-q47v — bcrypt: upgrade to the fixed version with the command below.
npm install bcrypt@5.0.0Details
In bcrypt (npm package) before version 5.0.0, data is truncated wrong when its length is greater than 255 bytes.
Are you affected?
Enter the version of the package you're using.