GHSA-5wg4-74h6-q47v

Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-7689

Packages

Ecosystem	Package	Affected	Fixed in
npm	bcrypt	< 5.0.0	5.0.0

As written in the advisory (Markdown source, shown as plain text).

In bcrypt (npm package) before version 5.0.0, data is truncated wrong when its length is greater than 255 bytes.

External links from the advisory. They lead to third-party sites.