Skip to main content

Improper Input Validation in org.webjars.npm:pbkdf2

CVE-2025-6545

  • org.webjars.npm:pbkdf2
  • pbkdf2
High
9.1/10

Summary

Improper Input Validation vulnerability in pbkdf2 allows signature spoofing by improper validation. This vulnerability is associated with program files "lib/to-buffer.Js". This issue affects pbkdf2 versions 3.0.10 through 3.1.2.

  • LOW
  • NETWORK
  • NONE
  • NONE

CWE-20 - Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

Advisory Timeline

  • Published