Description

Data is truncated wrong when its length is greater than 255 bytes.

Remediation

References

https://snyk.io/vuln/SNYK-JS-BCRYPT-572911

https://github.com/kelektiv/node.bcrypt.js/pull/806

https://github.com/kelektiv/node.bcrypt.js/pull/807

https://github.com/kelektiv/node.bcrypt.js/issues/776

Related Vulnerabilities

CVE-2021-3810 Vulnerability in npm package code-server

CVE-2019-10417 Vulnerability in maven package io.fabric8.pipeline:kubernetes-pipeline-devops-steps

CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-jms-processors

CVE-2019-16558 Vulnerability in maven package com.inflectra.spiratest.plugins:inflectra-spira-integration

CVE-2022-0272 Vulnerability in maven package io.gitlab.arturbosch.detekt:detekt-core

Severity

High

Classification

CWE-190 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Third Party Advisory Patch