{"action":"Upgrade bcrypt to 5.0.0 or later.","affected":[{"fixed":"5.0.0","introduced":"0"}],"component":"bcrypt","cve_ids":["CVE-2020-7689"],"ecosystem":"npm","epss":0.00785,"exploited":false,"fixed_versions":["5.0.0"],"ghsa_id":"GHSA-5wg4-74h6-q47v","id":"tcs_01M5KF4XQP2W7YN2D40SGHEKH2","modified_at":"2026-07-08T06:49:33.281819095Z","published_at":"2020-08-20T14:38:49Z","references":["https://osv.dev/vulnerability/GHSA-5wg4-74h6-q47v","https://nvd.nist.gov/vuln/detail/CVE-2020-7689","https://github.com/kelektiv/node.bcrypt.js/issues/776","https://github.com/kelektiv/node.bcrypt.js/pull/806","https://github.com/kelektiv/node.bcrypt.js/pull/807","https://snyk.io/vuln/SNYK-JS-BCRYPT-572911"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-5wg4-74h6-q47v","url":"https://osv.dev/vulnerability/GHSA-5wg4-74h6-q47v"}],"summary":"Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt"}