jBCrypt library cryptographic vulnerability

non-ASCII characters are converted to '?' befor hash calculation...