Skip to content
OpenAdvisories
High · 8.6 CVE-2025-12816 EUVD-2025-199630GHSA-5gfm-wpxj-wjgq

CVE-2025-12816

Published Nov 25, 2025 · Updated Nov 25, 2025 · Assigned by certcc

Vendor: Digital Bazaar Product: forge Product: node-forge Package: argo-workflow-cli-3.7 Package: argo-workflow-executor-3.7 Package: argo-workflows-3.7 Package: argo-workflows-known-hosts-3.7 Package: jitsucom-jitsu Package: jitsucom-jitsu-console Package: jitsucom-jitsu-rotor Package: katib-earlystopping Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kubeflow-centraldashboard Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: node-forge Package: node-node-forge Package: node-node-forge Package: opensearch-dashboards-3 Package: opensearch-dashboards-3-alerting-dashboards-plugin Package: opensearch-dashboards-3-anomaly-detection-dashboards-plugin Package: opensearch-dashboards-3-config Package: opensearch-dashboards-3-dashboards-maps Package: opensearch-dashboards-3-dashboards-notifications Package: opensearch-dashboards-3-dashboards-observability Package: opensearch-dashboards-3-dashboards-query-workbench Package: opensearch-dashboards-3-dashboards-reporting Package: opensearch-dashboards-3-dashboards-search-relevance Package: opensearch-dashboards-3-index-management-dashboards-plugin Package: opensearch-dashboards-3-ml-commons-dashboards Package: opensearch-dashboards-3-security-analytics-dashboards-plugin Package: opensearch-dashboards-3-security-dashboards-plugin Package: reaper Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: npm Ecosystem: Ubuntu Ecosystem: Wolfi

Description

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.

Affected products

VendorProductAffectedFixed
Digital Bazaar node-forge ≤ 1.3.1 —
Digital Bazaar forge ≤ 1.3.1 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 11 node-node-forge No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS node-node-forge No fix yet —
Ubuntu 20.04 LTS node-node-forge No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 golang-github-prometheus-alertmanager 0.28.1-150100.4.31.1 SUSE-SU-2026:1008-1
SLES 15 SP7 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLES 15 SP7 golang-github-prometheus-prometheus 3.5.0-150100.4.29.1 SUSE-SU-2026:1008-1
SLES 15 SP7 golang-github-prometheus-promu 0.17.0-150000.3.30.1 SUSE-SU-2026:1013-1
SLES 15 SP6 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLES 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLES 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
Show 10 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 15 SP6 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLES for SAP 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLES for SAP 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLE HPC 15 SP5 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SLE HPC 15 SP4 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SUSE Multi Linux Manager Tools SLE-Micro-5 dracut-saltboot 1.1.0-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-Micro-5 golang-github-QubitProducts-exporter_exporter 0.4.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-Micro-5 golang-github-prometheus-node_exporter 1.9.1-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-Micro-5 prometheus-blackbox_exporter 0.26.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.1.24-150002.3.9.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 dracut-saltboot 1.1.0-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-QubitProducts-exporter_exporter 0.4.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-boynux-squid_exporter 1.13.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-lusitaniae-apache_exporter 1.0.10-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-alertmanager 0.28.1-150002.4.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-node_exporter 1.9.1-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.5.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 grafana 11.5.10-150002.4.9.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.1.5-150002.3.6.2 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 prometheus-blackbox_exporter 0.26.0-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 rhnlib 5.1.4-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.1.12-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.1.8-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-susemanager-client 5.1.5-150002.3.6.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-common-libs 5.1.5-150002.3.3.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.1.24-150002.3.9.1 SUSE-SU-2026:0630-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-QubitProducts-exporter_exporter 0.4.0-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-boynux-squid_exporter 1.13.0-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-lusitaniae-apache_exporter 1.0.10-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-alertmanager 0.28.1-120002.4.6.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-node_exporter 1.9.1-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-prometheus 3.5.0-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 grafana 11.5.10-120002.4.9.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push +1 5.1.5-120002.3.6.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 prometheus-blackbox_exporter 0.26.0-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 rhnlib 5.1.4-120002.3.6.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.1.12-120002.3.6.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.1.8-120002.3.6.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-common-libs 5.1.5-120002.3.3.1 SUSE-SU-2026:0628-1
SUSE Multi Linux Manager Tools SLE-12 uyuni-tools 5.1.24-120002.3.9.1 SUSE-SU-2026:0628-1
SUSE Manager Client Tools for SLE Micro 5 dracut-saltboot 1.1.0-150000.1.65.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-tools 0.1.38-150000.1.30.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 dracut-saltboot 1.1.0-150000.1.65.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-boynux-squid_exporter 1.13.0-150000.1.12.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-lusitaniae-apache_exporter 1.0.10-150000.1.26.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-prometheus-alertmanager 0.28.1-150100.4.31.1 SUSE-SU-2026:1008-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 3.5.0-150000.3.67.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 grafana 11.6.11-150000.1.90.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 spacecmd 5.0.15-150000.3.142.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 uyuni-tools 0.1.38-150000.1.30.1 SUSE-SU-2026:1013-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 golang-github-prometheus-prometheus 3.5.0-160000.1.1 openSUSE-SU-2026:20177-1
openSUSE Leap 15.6 dracut-saltboot 1.1.0-150000.1.65.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-boynux-squid_exporter 1.13.0-150000.1.12.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-lusitaniae-apache_exporter 1.0.10-150000.1.26.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-prometheus-alertmanager 0.28.1-150100.4.31.1 SUSE-SU-2026:1008-1
openSUSE Leap 15.6 golang-github-prometheus-node_exporter 1.9.1-150100.3.38.1 SUSE-SU-2026:1008-1
openSUSE Leap 15.6 golang-github-prometheus-prometheus 3.5.0-150100.4.29.1 SUSE-SU-2026:1008-1
openSUSE Leap 15.6 golang-github-prometheus-promu 0.17.0-150000.3.30.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 spacecmd 5.0.15-150000.3.142.1 SUSE-SU-2026:1013-1

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) reaper 3.1.1-21 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling argo-workflows-3.7 +3 3.7.4-r2 —
Wolfi rolling jitsucom-jitsu +2 2.11.0-r8 —
Wolfi rolling katib-earlystopping +8 0.19.0-r31 —
Wolfi rolling katib-suggestion-goptuna-compat 0.19.0-r40 —
Wolfi rolling kubeflow-centraldashboard 1.10.0-r6 —
Wolfi rolling kubeflow-pipelines +11 2.15.0-r0 —
Wolfi rolling opensearch-dashboards-3 +13 3.2.0-r2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-forge < 1.3.2 1.3.2 GHSA-5gfm-wpxj-wjgq

Advisories 8

References