node-pbkdf2 vulnerabilities (Debian)

2 vulnerabilities.

• node-pbkdf2 Debian pbkdf2 rehashes long passwords on every iteration, enabling denial of service CVE-2026-102414 Fix available 6.3 MediumSeptember 29, 2026
• node-pbkdf2 Debian pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js CVE-2025-6545 Fix available 9.1 CriticalJune 23, 2025