CVE-2025-6547

CVE-2025-6547 is a critical Improper Input Validation vulnerability (CWE-20) in the pbkdf2 library, specifically versions 3.1.2 and earlier, allowing for Signature Spoofing. This vulnerability carries a CVSS 4.0 score of 9.1, indicating a severe risk with network accessibility, high attack complexity, and potential for high integrity and confidentiality impacts. While no specific affected products are listed, the vulnerability's high severity and the absence of active exploitation, public exploit code, or significant community discussion suggest it is not currently a widespread threat, though its potential impact remains critical.