angler-fishThe Vulnerability History Project

Fixed #24115 -- Allowed bcrypt hashers to upgrade passwords on rounds change.

      Thanks Florian Apolloner for the review.
by Lindsey the Elephant Seal 2015-02-26 19:04:24 UTC
commit b86abbceb9a96d7a0fe18047c8fcd6fca90a2f3e
Django VCC CVE-2016-2513
django/contrib/auth/hashers.py
-4
docs/releases/1.9.txt
-3
tests/auth_tests/test_hashers.py
-32
expand_less