CVE-2019-20138: HTTP Authentication Library Project HTTP Authentication Library

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used.

Affected products

• HTTP Authentication Library Project HTTP Authentication Library: before 2019-12-27 (fixed in 2019-12-27)

Published 2019-12-30. Last modified 2026-06-17.