Medium
ghsa-x3ff-w252-2g7j
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 17
Reset filters
High
CVE-2026-33896
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
High
CVE-2026-33895
Forge has signature forgery in Ed25519 due to missing S > L check
High
CVE-2026-33894
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
High
CVE-2026-33891
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
High
CVE-2025-66031
node-forge has ASN.1 Unbounded Recursion
Medium
CVE-2025-66030
node-forge is vulnerable to ASN.1 OID Integer Truncation
High
CVE-2025-12816
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
High
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Medium
CVE-2022-24773
Improper Verification of Cryptographic Signature in `node-forge`
High
CVE-2022-24772
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24771
Improper Verification of Cryptographic Signature in node-forge
Medium
CVE-2022-0122
Open Redirect in node-forge
Low
ghsa-5rrq-pxf6-6jx5
Prototype Pollution in node-forge debug API.
Low
ghsa-wxgw-qj99-44c2
Prototype Pollution in node-forge util.setPath API
Low
ghsa-gf8q-jrpm-jvxq
URL parsing in node-forge could lead to undesired behavior.
High
CVE-2020-7720
Prototype Pollution in node-forge
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.