Known Vulnerabilities for Pbkdf2 by Browserify
Listed below are 8 of the newest known vulnerabilities associated with "Pbkdf2" by "Browserify".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102414 json | pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (l... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-81718 json | openssl_encrypt versions before 1.4.9 use under-parameterized PBKDF2-HMAC-SHA256 with only 100,000 iterations to protect PQC ... | Not Provided | 2026-08-27 | 2026-08-31 |
| CVE-2026-74888 json | openssl_encrypt versions before 1.4.0 use a non-standard PBKDF2 key derivation construction with iterations=1 per call in an ... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-71205 json | changedetection.io's /login route checks the submitted password against a single PBKDF2-HMAC-SHA256 hash with no per-IP or pe... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-53762 json | VeraCrypt provides disk encryption with strong security based on TrueCrypt. Prior to 1.26.29, non-default builds created with... | Not Provided | 2026-08-21 | 2026-08-26 |
| CVE-2026-48859 json | Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote u... | Not Provided | 2026-06-10 | 2026-09-08 |
| CVE-2026-42198 json | pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a cli... | Not Provided | 2026-04-29 | 2026-09-11 |
| CVE-2026-15041 json | A flaw was found in 389 Directory Server. The PBKDF2-SHA256 password verification function uses standard memcmp() for compari... | Not Provided | 2026-07-08 | 2026-07-08 |