Gitblit currently uses outdated hash functions for passwords stored in the user file. It should be updated to use modern hashes considered secure.