CVE-2020-7689
1 advisory.
npm/bcrypt CVE-2020-7689: medium 5.9, EPSS 0.78%
Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
Action: Upgrade bcrypt to 5.0.0 or later.
npm i bcrypt@5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-5wg4-74h6-q47v
- https://nvd.nist.gov/vuln/detail/CVE-2020-7689
- https://github.com/kelektiv/node.bcrypt.js/issues/776
- https://github.com/kelektiv/node.bcrypt.js/pull/806
- https://github.com/kelektiv/node.bcrypt.js/pull/807
- https://snyk.io/vuln/SNYK-JS-BCRYPT-572911
CVE-2020-7689 · published · modified · JSON