`pbkdf2`

Ecosystem:
npm

Package URL:
pkg:npm/pbkdf2

Total PRs:
59,751 Dependabot PRs

Latest PR:
12 days ago

Unique Repositories:
58,701 repositories

Unique Repos (30 days):
16 repositories

Security Advisories

pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos

GHSA-h7cp-r72f-jxh6 CVE-2025-6545 CRITICAL published about 1 year ago • updated 3 days ago

### Summary This affects both: 1. Unsupported algos (e.g. `sha3-256` / `sha3-512` / `sha512-256`) 2. Supported but non-normalized algos (e.g. `S...

3.0.17 → 3.1.6 Minor PR

Open 12 days ago 2 comments

Bump pbkdf2 from 3.1.1 to 3.1.6

sepehrnava/react-hero-animations #2

3.1.1 → 3.1.6 Patch PR

Closed 14 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 16 updates

Domimueller85/subgraphs #1

3.1.2 → 3.1.6 Patch PR

Closed 14 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

Eprince-hub/react-graphql-frontend-backend-lessons #1

3.1.2 → 3.1.6 Patch PR

Open 15 days ago 2 comments

Bump pbkdf2 from 3.1.2 to 3.1.6

joeblau/previewimage #9

3.1.2 → 3.1.6 Patch PR

Open 15 days ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

goodgollyholly/proofofexistence #1

3.0.17 → 3.1.6 Minor PR

Open 20 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 13 directories with 12 updates

Dargon789/codesandbox-client #137

3.0.17 → 3.1.6 Minor PR

Open 25 days ago 2 comments

Build(deps): Bump the npm_and_yarn group across 1 directory with 27 updates

EmilynnJ/ragflow #1

3.1.2 → 3.1.6 Patch PR

Open 26 days ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

EmilynnJ/twilio-video.js #1

3.1.2 → 3.1.6 Patch PR

Open 26 days ago 4 comments

Bump the npm_and_yarn group across 1 directory with 13 updates

Dct555/1inch-token #3

3.1.2 → 3.1.6 Patch PR

Open 26 days ago 1 comment

Bump pbkdf2 from 3.0.17 to 3.1.6 in /functions

nternouski/my-web #25

3.0.17 → 3.1.6 Minor PR

Closed 27 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 23 directories with 19 updates

Reality2byte/core #611

3.1.2 → 3.1.5 Patch PR

Closed 28 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 11 directories with 16 updates

Web3Auth/core #25

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 6 updates

GlacierEQ/plate #41

3.1.2 → 3.1.5 Patch PR

Open about 1 month ago 4 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Dargon789/web3.js #81

3.1.2 → 3.1.5 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Dargon789/web3.js #79

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

Satelink-Protocol/Satelink_Network #63

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 20 updates

thirdweb-dev/engine #942

3.1.2 → 3.1.5 Patch PR

Open about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Dargon789/web3.js #76

3.1.2 → 3.1.5 Patch PR

Open about 1 month ago 1 comment

chore(deps): Bump the npm_and_yarn group across 1 directory with 16 updates

robertcdawson/coronavirus-us-county-tracker #28

3.0.17 → 3.1.5 Minor PR

Closed about 1 month ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 16 updates

Dargon789/web3.js #75

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 26 updates

FacePrintPay/bolt.new #1

3.1.2 → 3.1.5 Patch PR

Open about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

ZoneCog/zone.bolt #32

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 9 directories with 20 updates

jcstein/next.js #12

3.1.1 → 3.1.5 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 5 directories with 14 updates

NethermindEth/starkwebkit #22

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 1 directory with 15 updates

drzo/bolt.ceo #28

3.1.2 → 3.1.5 Patch PR

Closed about 1 month ago 2 comments

Bump pbkdf2 from 3.1.1 to 3.1.5

Iryna-Slynko/iryna-slynko-personal-website #14

3.1.1 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 28 updates

Cyptopimpinainteazy/DEXTOOLSassets #1

3.0.17 → 3.1.5 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

Akusher23/web3.js #23

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

build(deps-dev): bump pbkdf2 from 3.1.1 to 3.1.5 in /server

ConductionNL/bisc-frontend #20

3.1.1 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 30 updates

hirehamir/brave-core #22

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

JoftheV/web3.js #27

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

c6ai/qitmeer.ts #6

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

OpenZeppelin/openzeppelin-upgrades #1244

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 3 directories with 17 updates

GlacierEQ/plate #30

3.1.2 → 3.1.5 Patch PR

Open about 2 months ago 4 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates

RyzinRiley/Yarnpkg #12

3.0.17 → 3.1.5 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 27 updates

RyzinRiley/Yarnpkg #10

3.0.17 → 3.1.5 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 16 updates

dlema861011010/fuse-network-dlemaandliz #2

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 20 updates

MetaMask/snap-bitcoin-wallet #603

3.1.2 → 3.1.5 Patch PR

Open about 2 months ago 2 comments

chore(deps-dev): bump pbkdf2 from 3.0.17 to 3.1.5 in /packages/amplify-ui

jensbodal/amplify-js #7

3.0.17 → 3.1.5 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 7 directories with 16 updates

funds123/Metamask-core #2

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 12 directories with 15 updates

Ownerbusinessjjfm/core #3

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 4 directories with 25 updates

JounQin/glint #4

3.1.2 → 3.1.5 Patch PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 28 updates

MetaMask/snap-simple-keyring #174

3.1.2 → 3.1.5 Patch PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 28 updates

luci-digital/brave-core #22

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 19 updates

H1d3r/kepler.gl #340

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump pbkdf2 from 3.1.2 to 3.1.5 in /pwa

ConductionNL/api-connector #9

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump pbkdf2 from 3.1.2 to 3.1.5

ConductionNL/sensrnet-registry-frontend #2

3.1.2 → 3.1.5 Patch PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 28 updates

hamirmahal/brave-core #19

3.1.2 → 3.1.5 Patch PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 26 updates

OmniBlocks/monorepo #221

3.1.2 → 3.1.5 Patch PR

Closed 2 months ago 1 comment

Package Details

Name:	`pbkdf2`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/pbkdf2`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 2

View All npm Advisories

Package Information

Description:

This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()

Repository:	https://github.com/crypto-browserify/pbkdf2
Homepage:	https://github.com/crypto-browserify/pbkdf2
Latest Release:	`3.1.3` about 1 year ago
Dependent Repos:	817,225
Dependent Packages:	840
Downloads:	49,189,173
Ranking:	Top 0.0398% by dependent repos Top 0.0393% by downloads Top 0.0789% by dependent pkgs

PR Status

Open 55,437 (92.8%)

Merged 1,776 (3.0%)

Closed 2,538 (4.2%)

PR Types

Minor 41,419 (69.3%)

Patch 18,329 (30.7%)

pbkdf2

Security Advisories

pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos

pbkdf2 silently disregards Uint8Array input, returning static keys

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`pbkdf2`