pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its JavaScript fallback (lib/sync.js). A password longer than the block size (64 bytes, or 128 bytes for sha384 and sha512) is passed to HMAC as the key on every iteration, and HMAC hashes such keys in full each time. Cost is therefore O(iterations × password length), and a long password can block the event loop. The fallback is used by pbkdf2Sync and pbkdf2 on Node.js before 0.12, on Bun (1.0.0 through 1.1.34, and 1.2.6 and later), and on Deno 2.9.0 and later, because their native pbkdf2Sync fails the library's feature check. It is also used when lib/sync.js is imported directly. Node.js 0.12 and later, and browser builds (which use lib/sync-browser.js), are not affected. Applications that enforce a reasonable maximum password length are not meaningfully affected.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its
    JavaScript fallback (lib/sync.js). A password longer than the block size (64 bytes, or 128 bytes for
    sha384 and sha512) is passed to HMAC as the key on every iteration, and HMAC hashes such keys in full each
    time. Cost is therefore O(iterations × password length), and a long password can block the event loop. The
    fallback is used by pbkdf2Sync and pbkdf2 on Node.js before 0.12, on Bun (1.0.0 through 1.1.34, and 1.2.6
    and later), and on Deno 2.9.0 and later, because their native pbkdf2Sync fails the library's feature
    check. It is also used when lib/sync.js is imported directly. Node.js 0.12 and later, and browser builds
    (which use lib/sync-browser.js), are not affected. Applications that enforce a reasonable maximum password
    length are not meaningfully affected. (CVE-2026-102414)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pbkdf2 through 3.1.6 re-hashes passwords longer than the digest's block size on every iteration in its     JavaScript fallback (lib/sync.js). A password longer than the block size (64 bytes, or 128 bytes for     sha384 and sha512) is passed to HMAC as the key on every iteration, and HMAC hashes such keys in full each     time. Cost is therefore O(iterations  password length), and a long password can block the event loop. The     fallback is used by pbkdf2Sync and pbkdf2 on Node.js before 0.12, on Bun (1.0.0 through 1.1.34, and 1.2.6     and later), and on Deno 2.9.0 and later, because their native pbkdf2Sync fails the library's feature     check. It is also used when lib/sync.js is imported directly. Node.js 0.12 and later, and browser builds     (which use lib/sync-browser.js), are not affected. Applications that enforce a reasonable maximum password     length are not meaningfully affected. (CVE-2026-102414)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
473459	SCA: security update for pbkdf2 (GHSA-477h-4r7f-fvrx)	Tenable Cloud Security	SCA Checks	Local	medium
473459	SCA: security update for pbkdf2 (GHSA-477h-4r7f-fvrx)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium
351350	Linux Distros Unpatched Vulnerability : CVE-2026-102414	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-102414

medium

Tenable Plugins

medium

medium

medium