Unrated

The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is...

CVE-2019-20138 First seen on SecPulse Dec 30, 2019

Original description The description as published by the source.

The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

patch github.com

Key facts

Severity: Unrated
Published: Dec 30, 2019
First seen on SecPulse: Dec 30, 2019

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50