Skip to content
OpenAdvisories

Package · Debian

node-node-forge

7 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-66030

    node-forge ASN.1 OID Integer Truncation

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs…

    digitalbazaar forge node-node-forge node-forge Debian Ubuntu npm
  • Medium 5.3
    CVE-2022-24773

    Improper Verification of Cryptographic Signature in `node-forge`

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `DigestInfo` for a proper ASN.1 structure. This can lead to succ…

    digitalbazaar forge node-node-forge node-forge Debian Ubuntu npm