Skip to content
OpenAdvisories
High · 8.7 CVE-2025-66031 EUVD-2025-199767GHSA-554w-wpv2-vw27

node-forge ASN.1 Unbounded Recursion

Published Nov 26, 2025 · Updated Nov 28, 2025 · Assigned by GitHub_M

Vendor: Digital Bazaar Product: forge Package: argo-workflow-cli-3.7 Package: argo-workflow-executor-3.7 Package: argo-workflows-3.7 Package: argo-workflows-known-hosts-3.7 Package: jitsucom-jitsu Package: jitsucom-jitsu-console Package: jitsucom-jitsu-rotor Package: katib-earlystopping Package: katib-suggestion-goptuna-compat Package: katib-suggestion-hyperband Package: katib-suggestion-hyperopt Package: katib-suggestion-nas-darts Package: katib-suggestion-nas-enas Package: katib-suggestion-optuna-enas Package: katib-suggestion-pbt-enas Package: katib-suggestion-skopt-enas Package: katib-tfevent-metricscollector Package: kubeflow-centraldashboard Package: kubeflow-pipelines Package: kubeflow-pipelines-apiserver Package: kubeflow-pipelines-cache_server Package: kubeflow-pipelines-cache-deployer Package: kubeflow-pipelines-cache-deployer-compat Package: kubeflow-pipelines-frontend Package: kubeflow-pipelines-metadata-envoy-config Package: kubeflow-pipelines-metadata-writer Package: kubeflow-pipelines-metadata-writer-compat Package: kubeflow-pipelines-persistence_agent Package: kubeflow-pipelines-scheduledworkflow Package: kubeflow-pipelines-viewer-crd-controller Package: node-forge Package: node-node-forge Package: node-node-forge Package: opensearch-dashboards-3 Package: opensearch-dashboards-3-alerting-dashboards-plugin Package: opensearch-dashboards-3-anomaly-detection-dashboards-plugin Package: opensearch-dashboards-3-config Package: opensearch-dashboards-3-dashboards-maps Package: opensearch-dashboards-3-dashboards-notifications Package: opensearch-dashboards-3-dashboards-observability Package: opensearch-dashboards-3-dashboards-query-workbench Package: opensearch-dashboards-3-dashboards-reporting Package: opensearch-dashboards-3-dashboards-search-relevance Package: opensearch-dashboards-3-index-management-dashboards-plugin Package: opensearch-dashboards-3-ml-commons-dashboards Package: opensearch-dashboards-3-security-analytics-dashboards-plugin Package: opensearch-dashboards-3-security-dashboards-plugin Package: reaper Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: npm Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.

Affected products

VendorProductAffectedFixed
digitalbazaar forge < 1.3.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 11 node-node-forge No fix yet —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS node-node-forge No fix yet —
Ubuntu 20.04 LTS node-node-forge No fix yet —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) reaper 3.1.1-21 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling argo-workflows-3.7 +3 3.7.4-r2 —
Wolfi rolling jitsucom-jitsu +2 2.11.0-r8 —
Wolfi rolling katib-earlystopping +8 0.19.0-r31 —
Wolfi rolling katib-suggestion-goptuna-compat 0.19.0-r40 —
Wolfi rolling kubeflow-centraldashboard 1.10.0-r6 —
Wolfi rolling kubeflow-pipelines +11 2.15.0-r0 —
Wolfi rolling opensearch-dashboards-3 +13 3.2.0-r2 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm node-forge < 1.3.2 1.3.2 GHSA-554w-wpv2-vw27

Advisories 4

References