pbkdf2 vulnerabilities (npm)
3 vulnerabilities.
-
pbkdf2npm pbkdf2 rehashes long passwords on every iteration, enabling denial of service 6.3 Medium -
pbkdf2npm On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
pbkdf2npm pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical