UBUNTU-CVE-2025-6547
Advisory lineage Upstream: 1 Downstream: 0
Upstream
Published: 23 Jun 2025, 19:15
Last modified:18 Jun 2026, 22:00
Vulnerability Summary
Overall Risk (default)
high
70/100 CVSS Score
9.1 CRITICAL
4.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
23 Jun 2025, 19:15
Published
Vulnerability first disclosed
18 Jun 2026, 22:00
Last Modified
Vulnerability information updated
Description
Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2.
CVSS Metrics
- v4.0•CRITICAL•Score: 9.1CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H
Affected Systems
- ubuntu•node-pbkdf2
all | all | all | all | all | all