https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T13:21:15.280237+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-6545 CVE-2025-6545 — pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supporte… 2026-10-02T13:21:15.707494+00:00

Affected: pbkdf2

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js.

This issue affects pbkdf2: from 3.0.10 through 3.1.2.

 https://vulnerability.circl.lu/vuln/usn-8452-1 USN-8452-1 — node-pbkdf2 vulnerability 2026-10-02T13:21:15.707646+00:00

Affected: Ubuntu:Pro:18.04:LTS: node-pbkdf2, Ubuntu:Pro:20.04:LTS: node-pbkdf2, Ubuntu:Pro:22.04:LTS: node-pbkdf2, Ubuntu:Pro:24.04:LTS: node-pbkdf2

Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.