bcrypt-ruby 2.0.0
bcrypt-ruby Gem for Ruby incorrect encoding of non US-ASCII characters (JRuby only)
high severity OSVDB-62067>= 2.1.4
In https://security.snyk.io/vuln/SNYK-RUBY-BCRYPT-20009, found "The advisory has been revoked - it doesn't affect any version of package bcrypt"
bcrypt-ruby Gem for Ruby suffered from a bug related to character encoding that substantially reduced the entropy of hashed passwords containing non US-ASCII characters. An incorrect encoding step transparently replaced such characters by '?' prior to hashing. In the worst case of a password consisting solely of non-US-ASCII characters, this would cause its hash to be equivalent to all other such passwords of the same length.
This issue only affects the JRuby implementation.
This gem has been renamed. Please use "bcrypt" from now on.
No officially reported memory leakage issues detected.
This gem version does not have any officially reported memory leaked issues.
Gem version without a license.
Unless a license that specifies otherwise is included, nobody can use, copy, distribute, or modify this library without being at risk of take-downs, shake-downs, or litigation.
This gem version is available.
This gem version has not been yanked and is still available for usage.