Skip to content

[🐸 Frogbot] Upgrade bcrypt to 5.0.0#1

Open
github-actions[bot] wants to merge 1 commit intomasterfrom
frogbot-bcrypt-7cb4a996014763f90d6b850a6943b74b
Open

[🐸 Frogbot] Upgrade bcrypt to 5.0.0#1
github-actions[bot] wants to merge 1 commit intomasterfrom
frogbot-bcrypt-7cb4a996014763f90d6b850a6943b74b

Conversation

@github-actions
Copy link

🚨 This automated pull request was created by Frogbot and fixes the below:

📦 Vulnerable Dependencies

✍️ Summary

SEVERITY CONTEXTUAL ANALYSIS DIRECT DEPENDENCIES IMPACTED DEPENDENCY FIXED VERSIONS CVES

High
Undetermined bcrypt:3.0.8 bcrypt 3.0.8 [5.0.0] CVE-2020-7689

🔬 Research Details

Description:
Data is truncated wrong when its length is greater than 255 bytes.


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant