browserify
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| browserify-sign | 1 | – | Oct 26, 2023 |
| pbkdf2 | 1 | – | Sep 29, 2026 |
Exploited and recent CVEs
- CVE-2026-102414 pbkdf2 rehashes long passwords on every iteration, enabling denial of service 0.3%
- CVE-2023-46234 browserify-sign vulnerable via an upper bound check issue in `dsaVerify` that leads to a signature forgery attack 0.6%