CVE-2020-7689: Node.bcrypt.js Project Node.bcrypt.js

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Data is truncated wrong when its length is greater than 255 bytes.

Affected products

• Node.bcrypt.js Project Node.bcrypt.js: before 5.0.0 (fixed in 5.0.0)

Published 2020-07-01. Last modified 2026-06-17.