CVE-2025-6547 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: 37.92%

Debian Releases

Debian Product

Codename

node-pbkdf2

bookworm	3.1.2-3 fixed
forky	3.1.6+~3.1.2-1 fixed
sid	3.1.6+~3.1.2-1 fixed
trixie	3.1.2-3 fixed

Ubuntu Releases

Ubuntu Product

Codename

node-pbkdf2

bionic	not-affected
focal	not-affected
jammy	not-affected
noble	not-affected
oracular	ignored
plucky	ignored
questing	not-affected
resolute	not-affected

openSUSE / SLES Releases

openSUSE Product

Release

aws-cli

suse enterprise sap 15 SP4	1.33.26-150400.34.7.1 fixed
suse enterprise sap 15 SP5	1.33.26-150400.34.7.1 fixed
suse enterprise sap 15 SP6	1.33.26-150400.34.7.1 fixed
suse enterprise server 15 SP4	1.33.26-150400.34.7.1 fixed
suse enterprise server 15 SP5	1.33.26-150400.34.7.1 fixed
suse enterprise server 15 SP6	1.33.26-150400.34.7.1 fixed

python311-boto3

suse enterprise desktop 15 SP7	1.34.138-150400.27.7.1 fixed
suse enterprise sap 15 SP4	1.34.138-150400.27.7.1 fixed
suse enterprise sap 15 SP5	1.34.138-150400.27.7.1 fixed
suse enterprise sap 15 SP6	1.34.138-150400.27.7.1 fixed
suse enterprise sap 15 SP7	1.34.138-150400.27.7.1 fixed
suse enterprise server 15 SP4	1.34.138-150400.27.7.1 fixed
suse enterprise server 15 SP5	1.34.138-150400.27.7.1 fixed
suse enterprise server 15 SP6	1.34.138-150400.27.7.1 fixed
suse enterprise server 15 SP7	1.34.138-150400.27.7.1 fixed

python311-botocore

suse enterprise desktop 15 SP7	1.34.144-150400.41.7.1 fixed
suse enterprise sap 15 SP4	1.34.144-150400.41.7.1 fixed
suse enterprise sap 15 SP5	1.34.144-150400.41.7.1 fixed
suse enterprise sap 15 SP6	1.34.144-150400.41.7.1 fixed
suse enterprise sap 15 SP7	1.34.144-150400.41.7.1 fixed
suse enterprise server 15 SP4	1.34.144-150400.41.7.1 fixed
suse enterprise server 15 SP5	1.34.144-150400.41.7.1 fixed
suse enterprise server 15 SP6	1.34.144-150400.41.7.1 fixed
suse enterprise server 15 SP7	1.34.144-150400.41.7.1 fixed

python311-coverage

suse enterprise desktop 15 SP6	7.6.10-150400.12.6.1 fixed
suse enterprise desktop 15 SP7	7.6.10-150400.12.6.1 fixed
suse enterprise sap 15 SP4	7.6.10-150400.12.6.1 fixed
suse enterprise sap 15 SP5	7.6.10-150400.12.6.1 fixed
suse enterprise sap 15 SP6	7.6.10-150400.12.6.1 fixed
suse enterprise sap 15 SP7	7.6.10-150400.12.6.1 fixed
suse enterprise server 15 SP4	7.6.10-150400.12.6.1 fixed
suse enterprise server 15 SP5	7.6.10-150400.12.6.1 fixed
suse enterprise server 15 SP6	7.6.10-150400.12.6.1 fixed
suse enterprise server 15 SP7	7.6.10-150400.12.6.1 fixed

python311-pluggy

suse enterprise desktop 15 SP6	1.5.0-150400.14.10.1 fixed
suse enterprise desktop 15 SP7	1.5.0-150400.14.10.1 fixed
suse enterprise sap 15 SP4	1.5.0-150400.14.10.1 fixed
suse enterprise sap 15 SP5	1.5.0-150400.14.10.1 fixed
suse enterprise sap 15 SP6	1.5.0-150400.14.10.1 fixed
suse enterprise sap 15 SP7	1.5.0-150400.14.10.1 fixed
suse enterprise server 15 SP4	1.5.0-150400.14.10.1 fixed
suse enterprise server 15 SP5	1.5.0-150400.14.10.1 fixed
suse enterprise server 15 SP6	1.5.0-150400.14.10.1 fixed
suse enterprise server 15 SP7	1.5.0-150400.14.10.1 fixed

python311-pytest

suse enterprise desktop 15 SP6	8.3.5-150400.3.9.1 fixed
suse enterprise desktop 15 SP7	8.3.5-150400.3.9.1 fixed
suse enterprise sap 15 SP4	8.3.5-150400.3.9.1 fixed
suse enterprise sap 15 SP5	8.3.5-150400.3.9.1 fixed
suse enterprise sap 15 SP6	8.3.5-150400.3.9.1 fixed
suse enterprise sap 15 SP7	8.3.5-150400.3.9.1 fixed
suse enterprise server 15 SP4	8.3.5-150400.3.9.1 fixed
suse enterprise server 15 SP5	8.3.5-150400.3.9.1 fixed
suse enterprise server 15 SP6	8.3.5-150400.3.9.1 fixed
suse enterprise server 15 SP7	8.3.5-150400.3.9.1 fixed

python311-pytest-cov

suse enterprise desktop 15 SP6	6.2.1-150400.12.6.1 fixed
suse enterprise desktop 15 SP7	6.2.1-150400.12.6.1 fixed
suse enterprise sap 15 SP4	6.2.1-150400.12.6.1 fixed
suse enterprise sap 15 SP5	6.2.1-150400.12.6.1 fixed
suse enterprise sap 15 SP6	6.2.1-150400.12.6.1 fixed
suse enterprise sap 15 SP7	6.2.1-150400.12.6.1 fixed
suse enterprise server 15 SP4	6.2.1-150400.12.6.1 fixed
suse enterprise server 15 SP5	6.2.1-150400.12.6.1 fixed
suse enterprise server 15 SP6	6.2.1-150400.12.6.1 fixed
suse enterprise server 15 SP7	6.2.1-150400.12.6.1 fixed

python311-pytest-mock

suse enterprise desktop 15 SP6	3.14.0-150400.13.6.1 fixed
suse enterprise desktop 15 SP7	3.14.0-150400.13.6.1 fixed
suse enterprise sap 15 SP4	3.14.0-150400.13.6.1 fixed
suse enterprise sap 15 SP5	3.14.0-150400.13.6.1 fixed
suse enterprise sap 15 SP6	3.14.0-150400.13.6.1 fixed
suse enterprise sap 15 SP7	3.14.0-150400.13.6.1 fixed
suse enterprise server 15 SP4	3.14.0-150400.13.6.1 fixed
suse enterprise server 15 SP5	3.14.0-150400.13.6.1 fixed
suse enterprise server 15 SP6	3.14.0-150400.13.6.1 fixed
suse enterprise server 15 SP7	3.14.0-150400.13.6.1 fixed

Common Weakness Enumeration

CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://github.com/browserify/pbkdf2/commit/e3102a8cd4830a3ac85cd0dd011cc002fdde33bb

https://github.com/browserify/pbkdf2/security/advisories/GHSA-v62p-rq8g-8h59