CRITICALnpm
GHSA-h7cp-r72f-jxh6· CVE-2025-6545pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos
Modified: 9/10/2026
package
npm/pbkdf2
pkg:npm/pbkdf2
CRITICALnpm
GHSA-v62p-rq8g-8h59· CVE-2025-6547pbkdf2 silently disregards Uint8Array input, returning static keys
Modified: 9/10/2026