pbkdf2 vulnerabilities (Root)

2 vulnerabilities.

• pbkdf2 Root On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys CVE-2025-6547 Fix available 9.1 CriticalJune 23, 2025
• pbkdf2 Root pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js CVE-2025-6545 Fix available 9.1 CriticalJune 23, 2025