DI
Vendor
digitalbazaar
13
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-85393 | FO forge digitalbazaar | 7.5 | Sep 3 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding |
| CVE-2026-33896 | FO forge digitalbazaar | 9.1 | Mar 27 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) |
| CVE-2026-33895 | FO forge digitalbazaar | 7.5 | Mar 27 | Forge has signature forgery in Ed25519 due to missing S > L check |
| CVE-2026-33894 | FO forge digitalbazaar | 7.5 | Mar 27 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field |
| CVE-2026-33891 | FO forge digitalbazaar | 7.5 | Mar 27 | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input |
| CVE-2025-66031 | FO Forge Digitalbazaar | 7.5 | Nov 26 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript |
| CVE-2025-66030 | FO Forge Digitalbazaar | 5.3 | Nov 26 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript |
| CVE-2025-12816 | FO Forge Digitalbazaar | 8.6 | Nov 25 | An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema… |
| CVE-2022-24773 | FO Forge Digitalbazaar | 5.3 | Mar 18 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript |
| CVE-2022-24772 | FO Forge Digitalbazaar | 7.5 | Mar 18 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript |
| CVE-2022-24771 | FO Forge Digitalbazaar | 7.5 | Mar 18 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript |
| CVE-2022-0122 | FO Forge Digitalbazaar | 6.1 | Jan 6 | forge is vulnerable to URL Redirection to Untrusted Site |
| CVE-2020-7720 | FO Forge Digitalbazaar | 7.3 | Sep 1 | The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function |