1 known security vulnerability

  • moderateGHSA-f27w-vcwj-c954(CVE-2026-33306)

    bcrypt-ruby has an Integer Overflow that Causes Zero Key-Strengthening Iterations at Cost=31 on JRuby

bcrypt() is a sophisticated and secure hash algorithm designed by The OpenBSD project for hashing passwords. The bcrypt Ruby gem provides a simple wrapper for safely handling passwords.

Required Ruby Version

None

Authors

Coda Hale

Versions

  1. 3.1.22
    1. source

      1. 3.1.22 source March 18, 2026 (46.5 KB)
    2. java

      1. 3.1.22 multi-abi March 18, 2026 (61.5 KB)
  2. 3.1.21
    1. source

      1. 3.1.21 source December 31, 2025 (46.5 KB)
    2. java

      1. 3.1.21 multi-abi December 31, 2025 (61.5 KB)
  3. 3.1.20
    1. source

      1. 3.1.20 source November 17, 2023 (46 KB)
    2. java

      1. 3.1.20 multi-abi November 17, 2023 (61 KB)
  4. 3.1.19
    1. source

      1. 3.1.19 source June 22, 2023 (54 KB)
    2. java

      1. 3.1.19 multi-abi June 22, 2023 (70 KB)
  5. 3.1.18
    1. source

      1. 3.1.18 source May 16, 2022 (54.5 KB)
    2. java

      1. 3.1.18 multi-abi May 16, 2022 (69.5 KB)
  6. 3.1.7
    1. source

      1. 3.1.7 source February 25, 2014 (42.5 KB)
    2. java

      1. 3.1.7 multi-abi February 25, 2014 (55 KB)
    3. x64-mingw32

      1. 3.1.7 multi-abi February 25, 2014 (59 KB)
    4. x86-mingw32

      1. 3.1.7 multi-abi February 25, 2014 (87 KB)
Show all versions (56 total)

SHA 256 checksum