Bcrypt-ruby vulnerabilities
We track 1 vulnerability in Bcrypt-ruby products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 24, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Bcrypt-ruby vulnerabilities
- 7.5 High severity
bcrypt-ruby: Integer Overflow or Wraparound
bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm. Prior to version 3.1.22, an integer overflow in the Java BCrypt implementation for JRuby can cause zero iterations in the strengthening loop. Impacted applications must be setti