René's URL Explorer Experiment


Title: crypto: ensure HKDF and PBKDF2 limits are validated by panva · Pull Request #65704 · nodejs/node · GitHub

Open Graph Title: crypto: ensure HKDF and PBKDF2 limits are validated by panva · Pull Request #65704 · nodejs/node

X Title: crypto: ensure HKDF and PBKDF2 limits are validated by panva · Pull Request #65704 · nodejs/node

Description: Node.js JavaScript runtime ✨🐢🚀✨. Contribute to nodejs/node development by creating an account on GitHub.

Open Graph Description: Followup to #62226 and #65222

X Description: Followup to #62226 and #65222

Opengraph URL: https://github.com/nodejs/node/pull/65704

X: @github

direct link

Domain: github.com

react-profiling0
react-import-mapreact,react-dom,react-dom/client,react-dom/profiling,react-is,react-reconciler,react/compiler-runtime,react/jsx-dev-runtime,react/jsx-runtime,scheduler@d5750093facf
route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:c016d199-3983-8008-377b-5c140b0c889a
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8442:163EAA:3BA63:4D89C:6AED0626
html-safe-nonce86f267b0df3729ac5fd8eafe72282e29a9e196379a56cb10d702a451be7fb163
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4NDQyOjE2M0VBQTozQkE2Mzo0RDg5Qzo2QUVEMDYyNiIsInZpc2l0b3JfaWQiOiI2OTE1NzE2NjY0OTA1MjM4MDU0IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmacfb5760c33ce87fde6a32498a0752893101d2e043edfd4066b6ad29d97005e236
hovercard-subject-tagpull_request:4412209575
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/nodejs/node/65704/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/062ae39bebd529dc05f4c13ed724e7f37b2866d1484f708a71dd751b664967cf/nodejs/node/pull/65704
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/062ae39bebd529dc05f4c13ed724e7f37b2866d1484f708a71dd751b664967cf/nodejs/node/pull/65704
og:image:altFollowup to #62226 and #65222
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamepanva
hostnamegithub.com
expected-hostnamegithub.com
None21e10c535436b2122cfb44c76dfb4af296e371850fb60de16776f8a64e5c3ed8
turbo-cache-controlno-cache
go-importgithub.com/nodejs/node git https://github.com/nodejs/node.git
octolytics-dimension-user_id9950313
octolytics-dimension-user_loginnodejs
octolytics-dimension-repository_id27193779
octolytics-dimension-repository_nwonodejs/node
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id27193779
octolytics-dimension-repository_network_root_nwonodejs/node
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release302a6d707c3288a5f951258a2fa3e926b8c8f8cf
ui-targetfull
theme-color#1e2327
color-schemelight dark
react-app-namepull-requests

Links:

Skip to contenthttps://github.com/nodejs/node/pull/65704#start-of-content
https://github.com/
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65704
GitHubRepository hosting, code review, and collaborationhttps://github.com/platform
CopilotAI coding agent for tasks, projects, and automated workhttps://github.com/features/copilot
ActionsCI/CD and automationhttps://github.com/features/actions
Code QualityQuality analysis, fixes, and enforcementhttps://github.com/features/code-quality
CodespacesCloud development environmentshttps://github.com/features/codespaces
Code SecurityVulnerability detection and remediationhttps://github.com/security/advanced-security/code-security
Secret ProtectionSecret scanning and leak preventionhttps://github.com/security/advanced-security/secret-protection
All Featureshttps://github.com/features
Documentationhttps://docs.github.com/en
Traininghttps://learn.github.com/skills
Certificationshttps://learn.github.com/credentials
Build with Copilothttps://github.com/features/ai
Customize Copilothttps://docs.github.com/en/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview
Integrationshttps://github.com/marketplace
Trending reposhttps://github.com/trending
GitHub Sponsorshttps://github.com/open-source/sponsors
Developer articleshttps://github.com/resources/articles
ChangelogYour source for the latest features, improvements, and fixes across GitHub products, all in one place.https://github.blog/changelog/
Enterpriseshttps://github.com/enterprise
Teamhttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
See all industrieshttps://github.com/solutions/industry
Why GitHubhttps://github.com/why-github
Customer Storieshttps://github.com/customer-stories
Business insightshttps://github.com/solutions/executive-insights
Trust Centerhttps://github.com/trust-center
GitHub Advanced SecurityEnterprise-grade code securityhttps://github.com/security/advanced-security
Copilot for businessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Documentationhttps://docs.github.com/en
Resource centerhttps://github.com/resources
Bloghttps://github.blog/
Events & webinarshttps://github.com/resources/events
Community Forumhttps://github.com/orgs/community/discussions
Customer Storieshttps://github.com/customer-stories
Integrationshttps://github.com/marketplace
Customer supporthttps://help.github.com/
Traininghttps://learn.github.com/skills
GitHub Statushttps://www.githubstatus.com/
Abouthttps://github.com/about
Partnershttps://github.com/partners
Changeloghttps://github.blog/changelog/
GitHub UniverseThe event for developers, by developers — talks, workshops, and what’s next for GitHub.https://githubuniverse.com/
Pricinghttps://github.com/pricing
Sign inhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65704
Sign uphttps://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=nodejs%2Fnode
Reloadhttps://github.com/nodejs/node/pull/65704
Reloadhttps://github.com/nodejs/node/pull/65704
Reloadhttps://github.com/nodejs/node/pull/65704
nodejshttps://github.com/nodejs
nodehttps://github.com/nodejs/node
Codehttps://github.com/nodejs/node
Issues654 (654)https://github.com/nodejs/node/issues
Pull requests666 (666)https://github.com/nodejs/node/pulls
Actionshttps://github.com/nodejs/node/actions
Projectshttps://github.com/nodejs/node/projects
Security and qualityhttps://github.com/nodejs/node/security
Insightshttps://github.com/nodejs/node/pulse
https://github.com/nodejs/node
panvahttps://github.com/panva
nodejs:mainhttps://github.com/nodejs/node/tree/main
panva:crypto-chekc-limitshttps://github.com/panva/node/tree/crypto-chekc-limits
Conversationhttps://github.com/nodejs/node/pull/65704
Commits2 (2)https://github.com/nodejs/node/pull/65704/commits
Checkshttps://github.com/nodejs/node/pull/65704/checks
Files changedhttps://github.com/nodejs/node/pull/65704/files
crypto: ensure HKDF and PBKDF2 limits are validatedhttps://github.com/nodejs/node/pull/65704#top
panvahttps://github.com/panva
nodejs:mainhttps://github.com/nodejs/node/tree/main
panva:crypto-chekc-limitshttps://github.com/panva/node/tree/crypto-chekc-limits
https://github.com/panva
panvahttps://github.com/panva
Sep 1, 2026https://github.com/nodejs/node/pull/65704#issue-5311943789
#62226https://github.com/nodejs/node/pull/62226
#65222https://github.com/nodejs/node/pull/65222
Please reload this pagehttps://github.com/nodejs/node/pull/65704
panvahttps://github.com/panva
September 1, 2026 14:19https://github.com/nodejs/node/pull/65704#commits-pushed-f985eea
https://github.com/panva
crypto: use primordials in HKDF info validationhttps://github.com/nodejs/node/pull/65704/commits/f985eea2ef797fb5e366bee1658b058e2b0205ac
f985eeahttps://github.com/nodejs/node/pull/65704/commits/f985eea2ef797fb5e366bee1658b058e2b0205ac
https://github.com/panva
crypto: validate the limit of PBKDF2 iterationshttps://github.com/nodejs/node/pull/65704/commits/e51bc56eb322ca2b59b626976a65f1b59b5d7302
e51bc56https://github.com/nodejs/node/pull/65704/commits/e51bc56eb322ca2b59b626976a65f1b59b5d7302
https://github.com/panva
panvahttps://github.com/panva
RafaelGSShttps://github.com/RafaelGSS
September 1, 2026 12:40https://github.com/nodejs/node/pull/65704#event-30345779560
https://github.com/panva
panvahttps://github.com/panva
commit-queue-rebase https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-rebase
Sep 1, 2026https://github.com/nodejs/node/pull/65704#event-30345780559
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 1, 2026https://github.com/nodejs/node/pull/65704#issuecomment-5494092730
Please reload this pagehttps://github.com/nodejs/node/pull/65704
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
crypto https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acrypto
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
Sep 1, 2026https://github.com/nodejs/node/pull/65704#event-30345790222
https://github.com/apps/codecov
codecovhttps://github.com/apps/codecov
Sep 1, 2026https://github.com/nodejs/node/pull/65704#issuecomment-5495389464
Please reload this pagehttps://github.com/nodejs/node/pull/65704
Codecovhttps://app.codecov.io/gh/nodejs/node/pull/65704?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
f9ab994https://app.codecov.io/gh/nodejs/node/commit/f9ab994e06f9c99610767a96c3bdd921054e497b?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
e51bc56https://app.codecov.io/gh/nodejs/node/commit/e51bc56eb322ca2b59b626976a65f1b59b5d7302?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Files with missing lineshttps://app.codecov.io/gh/nodejs/node/pull/65704?dropdown=coverage&src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
lib/internal/crypto/hkdf.jshttps://app.codecov.io/gh/nodejs/node/pull/65704?src=pr&el=tree&filepath=lib%2Finternal%2Fcrypto%2Fhkdf.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL2NyeXB0by9oa2RmLmpz
lib/internal/crypto/webidl.jshttps://app.codecov.io/gh/nodejs/node/pull/65704?src=pr&el=tree&filepath=lib%2Finternal%2Fcrypto%2Fwebidl.js&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs#diff-bGliL2ludGVybmFsL2NyeXB0by93ZWJpZGwuanM=
22 files with indirect coverage changeshttps://app.codecov.io/gh/nodejs/node/pull/65704/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=nodejs
Test Analyticshttps://docs.codecov.com/docs/test-analytics
JS Bundle Analysishttps://docs.codecov.com/docs/javascript-bundle-analysis
Please reload this pagehttps://github.com/nodejs/node/pull/65704
https://github.com/RafaelGSS
RafaelGSShttps://github.com/RafaelGSS
Sep 1, 2026 https://github.com/nodejs/node/pull/65704#pullrequestreview-5079394698
View reviewed changes https://github.com/nodejs/node/pull/65704/files/e51bc56eb322ca2b59b626976a65f1b59b5d7302
https://github.com/panva
panvahttps://github.com/panva
author ready https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Sep 1, 2026https://github.com/nodejs/node/pull/65704#event-30353060501
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
request-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Arequest-ci
Sep 1, 2026https://github.com/nodejs/node/pull/65704#event-30353553122
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 1, 2026https://github.com/nodejs/node/pull/65704#issuecomment-5495757779
https://ci.nodejs.org/job/node-test-pull-request/76831/https://ci.nodejs.org/job/node-test-pull-request/76831/
Please reload this pagehttps://github.com/nodejs/node/pull/65704
https://github.com/trivikr
trivikrhttps://github.com/trivikr
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
Sep 2, 2026https://github.com/nodejs/node/pull/65704#event-30389374329
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
lacks-second-approval https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Alacks-second-approval
Sep 3, 2026https://github.com/nodejs/node/pull/65704#event-30489268917
https://github.com/panva
panvahttps://github.com/panva
avivkellerhttps://github.com/avivkeller
jasnellhttps://github.com/jasnell
September 4, 2026 10:40https://github.com/nodejs/node/pull/65704#event-30548047391
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 8, 2026https://github.com/nodejs/node/pull/65704#issuecomment-5585461061
51c992f...51cb9f4https://github.com/nodejs/node/compare/51c992f99bc0ec6dc1cafdc9f00defa28eead3ea...51cb9f46a5308a26aad70dc8af117da34a14eba4
Please reload this pagehttps://github.com/nodejs/node/pull/65704
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 8, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-2718330
https://github.com/panva
https://github.com/nodejs-github-bot
crypto: use primordials in HKDF info validationhttps://github.com/nodejs/node/commit/271833006c5f766aeb01d2425d28c21a22cf68e5
2718330https://github.com/nodejs/node/commit/271833006c5f766aeb01d2425d28c21a22cf68e5
#65704https://github.com/nodejs/node/pull/65704
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 8, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-51cb9f4
https://github.com/panva
https://github.com/nodejs-github-bot
crypto: validate the limit of PBKDF2 iterationshttps://github.com/nodejs/node/commit/51cb9f46a5308a26aad70dc8af117da34a14eba4
51cb9f4https://github.com/nodejs/node/commit/51cb9f46a5308a26aad70dc8af117da34a14eba4
#65704https://github.com/nodejs/node/pull/65704
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
Sep 8, 2026https://github.com/nodejs/node/pull/65704#event-30755960265
https://github.com/nodejs-github-bot
nodejs-github-bothttps://github.com/nodejs-github-bot
commit-queue https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue
lacks-second-approval https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Alacks-second-approval
Sep 8, 2026https://github.com/nodejs/node/pull/65704#event-30755962309
https://github.com/panva
panvahttps://github.com/panva
September 8, 2026 13:00https://github.com/nodejs/node/pull/65704#event-30756334160
aduh95https://github.com/aduh95
Sep 16, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-cd5a761
https://github.com/panva
https://github.com/aduh95
crypto: use primordials in HKDF info validationhttps://github.com/nodejs/node/commit/cd5a7611e9b36e12f13555df86bd587299d13398
cd5a761https://github.com/nodejs/node/commit/cd5a7611e9b36e12f13555df86bd587299d13398
#65704https://github.com/nodejs/node/pull/65704
aduh95https://github.com/aduh95
Sep 16, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-e44669b
https://github.com/panva
https://github.com/aduh95
crypto: validate the limit of PBKDF2 iterationshttps://github.com/nodejs/node/commit/e44669bb7d64efa8fb4807524c36fdb5e12dc80e
e44669bhttps://github.com/nodejs/node/commit/e44669bb7d64efa8fb4807524c36fdb5e12dc80e
#65704https://github.com/nodejs/node/pull/65704
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Sep 20, 2026 https://github.com/nodejs/node/pull/65704#ref-pullrequest-5520639298
2026-09-22, Version 26.10.0 (Current) #66163 https://github.com/nodejs/node/pull/66163
aduh95https://github.com/aduh95
Sep 22, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-624abbe
https://github.com/panva
https://github.com/aduh95
crypto: use primordials in HKDF info validationhttps://github.com/nodejs/node/commit/624abbecd7b69073a1d20cb90ba8b72c4c1d151a
624abbehttps://github.com/nodejs/node/commit/624abbecd7b69073a1d20cb90ba8b72c4c1d151a
#65704https://github.com/nodejs/node/pull/65704
aduh95https://github.com/aduh95
Sep 22, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-f4665f1
https://github.com/panva
https://github.com/aduh95
crypto: validate the limit of PBKDF2 iterationshttps://github.com/nodejs/node/commit/f4665f1c410c4101583fc4543e86122fd5e1e2af
f4665f1https://github.com/nodejs/node/commit/f4665f1c410c4101583fc4543e86122fd5e1e2af
#65704https://github.com/nodejs/node/pull/65704
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Oct 11, 2026 https://github.com/nodejs/node/pull/65704#ref-pullrequest-5805806867
2026-10-14, Version 24.22.0 'Krypton' (LTS) #66667 https://github.com/nodejs/node/pull/66667
markhardinghttps://github.com/markharding
Oct 19, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-7e9c1d2
https://github.com/markharding
Update Node.js to v24.22.0 (#1833)https://github.com/futo-org/Harbor/commit/7e9c1d2fd346da653b5f5b3cbdadc19494c1516f
7e9c1d2https://github.com/futo-org/Harbor/commit/7e9c1d2fd346da653b5f5b3cbdadc19494c1516f
paultibbettshttps://github.com/paultibbetts
Oct 27, 2026 https://github.com/nodejs/node/pull/65704#ref-commit-1cd6b6e
https://github.com/renovate-bot
https://github.com/paultibbetts
chore(deps): update node.js to v24.22.1 (#12)https://github.com/paultibbetts/indiekit.paultibbetts.uk/commit/1cd6b6eb5f00d6f9cbd77687d68df169241003ad
1cd6b6ehttps://github.com/paultibbetts/indiekit.paultibbetts.uk/commit/1cd6b6eb5f00d6f9cbd77687d68df169241003ad
https://github.co/hiddenchars
https://github.com/nodejs/node/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fnodejs%2Fnode%2Fpull%2F65704
https://github.com/RafaelGSS
RafaelGSS https://github.com/RafaelGSS
https://github.com/nodejs/node/pull/65704/files/e51bc56eb322ca2b59b626976a65f1b59b5d7302
https://github.com/jasnell
jasnell https://github.com/jasnell
https://github.com/avivkeller
avivkeller https://github.com/avivkeller
Please reload this pagehttps://github.com/nodejs/node/pull/65704
author ready https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3A%22author%20ready%22
commit-queue-rebase https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acommit-queue-rebase
crypto https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Acrypto
needs-ci https://github.com/nodejs/node/issues?q=state%3Aopen%20label%3Aneeds-ci
Please reload this pagehttps://github.com/nodejs/node/pull/65704
https://github.com/panva
https://github.com/nodejs-github-bot
https://github.com/RafaelGSS
https://github.com/trivikr
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.