Read the docs
TI-2026-65391 Aliases CVE-2026-102414GHSA-477h-4r7f-fvrx

pbkdf2 rehashes long passwords on every iteration, enabling denial of service

Priority MEDIUM 61CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-400.

Summary

pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer than the block size (64 bytes, or 128 bytes for sha384 and sha512) is passed to HMAC as the key on every iteration, and HMAC hashes such keys in full each time. Cost is therefore O(iterations × password length), and a long password can block the event loop. The fallback is used by pbkdf2Sync and pbkdf2 on Node.js before 0.12, on Bun (1.0.0 through 1.1.34, and 1.2.6 and later), and on Deno 2.9.0 and later, because their native pbkdf2Sync fails the library's feature check. It is also used when lib/sync.js is imported directly. Node.js 0.12 and later, and browser builds (which use lib/sync-browser.js), are not affected. Applications that enforce a reasonable maximum password length are not meaningfully affected.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00345 28th percentileScored 2026-11-07
Fix Fixed pbkdf2 (npm): 3.1.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
browserifypbkdf2up to 3.1.6—No fix listedCNA
—pbkdf2 (npm)before 3.1.73.1.7Patch availableGHSA-477h-4r7f-fvrx
  • pbkdf2 Vendorbrowserify Affected up to 3.1.6 Fixed in — No fix listed CNA
  • pbkdf2 (npm) Vendor— Affected before 3.1.7 Fixed in 3.1.7 Patch available GHSA-477h-4r7f-fvrx

Remediation

  • Fix · GHSA-477h-4r7f-fvrx pbkdf2 (npm) Fixed in 3.1.7 Advisory →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-102414
  2. 2026-10-06 Alias added: GHSA-477h-4r7f-fvrx
  3. 2026-10-06 Fix available: npm/[email protected] · GHSA-477h-4r7f-fvrx
  4. 2026-10-06 CVSS score added · GHSA-477h-4r7f-fvrx
  5. 2026-10-06 Weakness changed · GHSA-477h-4r7f-fvrx
  6. 2026-10-06 5 new references · GHSA-477h-4r7f-fvrx
  7. 2026-11-07 Affected versions changed · Red Hat
  8. 2026-11-07 CVSS score added · Red Hat

References

Patch 1

Advisory 2

Other 3

  • TI-2025-08513 Missing type checks leading to hash rewind and passing on crafted data CVSS 4.0CRITICAL 9.1
  • TI-2025-08512 Missing type checks leading to hash rewind and passing on crafted data CVSS 4.0CRITICAL 9.1
  • TI-2023-24861 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences