Skip to content
OpenAdvisories

Package · Debian

node-node-forge

7 known vulnerabilities.

All Critical High Medium Low Exploited only

4 results · Clear filters · Feed

  • High 8.7
    CVE-2025-66031

    node-forge ASN.1 Unbounded Recursion

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that…

    digitalbazaar forge node-node-forge node-forge Debian Ubuntu npm
  • High 8.6
    CVE-2025-12816

    CVE-2025-12816

    An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographi…

    Digital Bazaar forge node-forge node-node-forge Debian Ubuntu npm
  • High 7.5
    CVE-2022-24772

    Improper Verification of Cryptographic Signature in `node-forge`

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. …

    digitalbazaar forge node-node-forge node-forge Debian Ubuntu npm
  • High 7.5
    CVE-2022-24771

    Improper Verification of Cryptographic Signature in node-forge

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structur…

    digitalbazaar forge node-node-forge node-forge Debian Ubuntu npm