JoltCode

I believe this may be caused by the limitations outlined [here](https://github.com/kelektiv/node.bcrypt.js#security-issues-and-concerns). > Per bcrypt implementation, only the first 72 bytes of a string are used. Any extra bytes are ignored...

Can repro as well, astro lsp doesn't work :( Zed 0.123.6

Ah beat me to it 😅

Yeah I'm having this issue on the latest bun version too

@Jarred-Sumner Please can you confirm if this has now been fixed in Bun v1.0.4? Thanks so much 😄!

Massive thanks to Ralph from the Tasking Manager Meetup for catching this 🐛!

I believe this might be where the bug is: https://github.com/hotosm/tasking-manager/blob/547e0ce706d40d680c774803828ae8c6a5cebf62/backend/services/stats_service.py#L43-L116 Could also be the function that calls these, it might be calling it with bad data or something....?

> @JoltCode - thanks so much for quickly capturing the discussion from our working group meeting. Would you be interested in working on a fix for this? Yeah, although not...

> Thank you @JoltCode . @ramyaragupathy let us know who from the Naxa team might be able to look into Joe's initial investigation and then collaborate. Happy to then connect...

> I always thought that those 91 tasks just wasn't validated yet :D That's interesting if so - the assumption in the TM call was that there was some sort...