cve.bz

digitalbazaar forge vulnerabilities in 2025, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 8.7CVE-2025-66031EPSS 0.4%

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep A…

  2. 6.3CVE-2025-66030EPSS 0.3%

    Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 struct…

  3. 8.6CVE-2025-12816EPSS 0.6%

    An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass dow…