fix GHSA-pxf8-6wqm-r6hh

enchant97 · enchant97 · commit dea5530cc989 · 2026-04-17T14:29:09.000+01:00
diff --git a/backend/db/models.go b/backend/db/models.go
@@ -51,7 +51,7 @@ func (u *User) IsPasswordMatch(plainPassword string) bool {
 	} else {
 		current = u.Password
 	}
-	if err := bcrypt.CompareHashAndPassword(current, []byte(plainPassword)); err == nil {
+	if err := bcrypt.CompareHashAndPassword(current, []byte(plainPassword)); err == nil && len(u.Password) != 0 {
 		return true
 	}
 	return false

Original file line number	Diff line number	Diff line change
`@@ -51,7 +51,7 @@ func (u *User) IsPasswordMatch(plainPassword string) bool {`
`51`	`51`	`} else {`
`52`	`52`	`current = u.Password`
`53`	`53`	`}`
`54`		`- if err := bcrypt.CompareHashAndPassword(current, []byte(plainPassword)); err == nil {`
	`54`	`+ if err := bcrypt.CompareHashAndPassword(current, []byte(plainPassword)); err == nil && len(u.Password) != 0 {`
`55`	`55`	`return true`
`56`	`56`	`}`
`57`	`57`	`return false`