CVE-2025-6545
CVE-2025-6545
9.1
CriticalPublished:
Last updated:
Source:7ffcee3d-2c14-4c3e-b844-86c6a321a158
Deferred
Weakness (CWE)
CVSS Vector
v4.0- Attack Vector
- Network
- Attack Complexity
- Low
- Attack Requirements
- Present
- Privileges Required
- None
- User Interaction
- None
- Confidentiality (Vulnerable)
- Low
- Integrity (Vulnerable)
- High
- Availability (Vulnerable)
- None
- Confidentiality (Subsequent)
- High
- Integrity (Subsequent)
- High
- Availability (Subsequent)
- High
Description
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/to-buffer.Js. This issue affects pbkdf2: from 3.0.10 through 3.1.2.
References
7ffcee3d-2c14-4c3e-b844-86c6a321a158
https://github.com/browserify/pbkdf2/commit/9699045c37a07f8319cfb8d44e2ff4252d7a70787ffcee3d-2c14-4c3e-b844-86c6a321a158
https://github.com/browserify/pbkdf2/commit/e3102a8cd4830a3ac85cd0dd011cc002fdde33bb7ffcee3d-2c14-4c3e-b844-86c6a321a158
https://github.com/browserify/pbkdf2/security/advisories/GHSA-h7cp-r72f-jxh6