Upgrading bcrypt 4 to 5
Review needed4.0.1 → 5.1.1Security2New1Changed7Fixed4Other7
Review neededUpgrade verdict
7 changed defaults and 2 security fixes.
In plain terms
- Version bump, security updates to sub dep npmlog.
- Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
Must act 2 items need code or config changes
Adds @mapbox/node-pre-gyp ^1.0.11.
Drops node-pre-gyp.
Installs 58 packages in all (was 68).
What you must change
Security2
Version bump, security updates to sub dep npmlog.
Integer Overflow or Wraparound and Use of a Broken or Risky Cryptographic Algorithm in bcrypt
Moderate · CVSS 5.9