Vulnerabilities > Sha256Crypt Project

DATE CVE VULNERABILITY TITLE RISK
2022-02-19 CVE-2016-20013 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.
5.0