CVE-2025-6547: pbkdf2: pbkdf2 silently returns static keys

Severity: Critical

CVSS Score: 9.1

Improper Input Validation vulnerability in pbkdf2 allows Signature Spoofing by Improper Validation.This issue affects pbkdf2: <=3.1.2.