Product · Digital Bazaar

node-forge

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.6

CVE-2025-12816

CVE-2025-12816

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographi…

Digital Bazaar forge node-forge katib-suggestion-hyperopt Debian Ubuntu Azure Linux Wolfi npm

Nov 25, 2025