Forge
Digitalbazaar · 13 CVEs
node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding
Sep 3, 2026
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Mar 27, 2026
Forge has signature forgery in Ed25519 due to missing S > L check
Mar 27, 2026
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
Mar 27, 2026
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
Mar 27, 2026
node-forge ASN.1 OID Integer Truncation
Nov 26, 2025
node-forge ASN.1 Unbounded Recursion
Nov 26, 2025
CVE-2025-12816
Nov 25, 2025
Improper Verification of Cryptographic Signature in `node-forge`
Mar 18, 2022
Improper Verification of Cryptographic Signature in `node-forge`
Mar 18, 2022
Improper Verification of Cryptographic Signature in node-forge
Mar 18, 2022
Open Redirect in digitalbazaar/forge
Jan 6, 2022
Prototype Pollution
Sep 1, 2020
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-85393 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding | HIGH | 0.33% | Sep 3, 2026 |
| CVE-2026-33896 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) | CRITICAL | 0.50% | Mar 27, 2026 |
| CVE-2026-33895 | Forge has signature forgery in Ed25519 due to missing S > L check | HIGH | 0.47% | Mar 27, 2026 |
| CVE-2026-33894 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field | HIGH | 0.45% | Mar 27, 2026 |
| CVE-2026-33891 | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input | HIGH | 0.90% | Mar 27, 2026 |
| CVE-2025-66030 | node-forge ASN.1 OID Integer Truncation | MEDIUM | 0.32% | Nov 26, 2025 |
| CVE-2025-66031 | node-forge ASN.1 Unbounded Recursion | HIGH | 0.43% | Nov 26, 2025 |
| CVE-2025-12816 | CVE-2025-12816 | HIGH | 0.74% | Nov 25, 2025 |
| CVE-2022-24772 | Improper Verification of Cryptographic Signature in `node-forge` | HIGH | 1.10% | Mar 18, 2022 |
| CVE-2022-24773 | Improper Verification of Cryptographic Signature in `node-forge` | MEDIUM | 0.96% | Mar 18, 2022 |
| CVE-2022-24771 | Improper Verification of Cryptographic Signature in node-forge | HIGH | 0.78% | Mar 18, 2022 |
| CVE-2022-0122 | Open Redirect in digitalbazaar/forge | MEDIUM | 0.84% | Jan 6, 2022 |
| CVE-2020-7720 | Prototype Pollution | CRITICAL | 3.19% | Sep 1, 2020 |
Showing 1 to 13 of 13 CVEs