Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 13:21:14 +0000 CVE-2025-6545 — pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supporte… https://vulnerability.circl.lu/vuln/cve-2025-6545 <p><strong>Affected:</strong> pbkdf2</p> <p>Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js.</p> <p>This issue affects pbkdf2: from 3.0.10 through 3.1.2.</p> <p><strong>Affected:</strong> pbkdf2</p> <p>Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js.</p> <p>This issue affects pbkdf2: from 3.0.10 through 3.1.2.</p> https://vulnerability.circl.lu/vuln/cve-2025-6545 USN-8452-1 — node-pbkdf2 vulnerability https://vulnerability.circl.lu/vuln/usn-8452-1 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-pbkdf2, Ubuntu:Pro:20.04:LTS: node-pbkdf2, Ubuntu:Pro:22.04:LTS: node-pbkdf2, Ubuntu:Pro:24.04:LTS: node-pbkdf2</p> <p>Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: node-pbkdf2, Ubuntu:Pro:20.04:LTS: node-pbkdf2, Ubuntu:Pro:22.04:LTS: node-pbkdf2, Ubuntu:Pro:24.04:LTS: node-pbkdf2</p> <p>Nikita Skovoroda discovered that pbkdf2 did not properly validate certain algorithm names. An attacker could possibly use this issue to generate predictable cryptographic keys, resulting in signature spoofing.</p> https://vulnerability.circl.lu/vuln/usn-8452-1