digitalbazaar forge
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-119191 | < 1.4.1 | Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer | HIGH 7.5 | |||
| CVE-2026-119190 | < 1.4.1 | Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 | HIGH 7.4 | |||
| CVE-2026-119189 | < 1.4.1 | Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage | MEDIUM 5.9 | |||
| CVE-2026-119188 | < 1.4.1 | Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message | HIGH 7.5 | |||
| CVE-2026-119187 | < 1.4.1 | Forge: Denial of service in TLS record processing via call stack exhaustion | HIGH 7.5 | |||
| CVE-2026-119186 | < 1.4.1 | Forge: AES-GCM authentication bypass via unvalidated tagLength option | MEDIUM 5.9 | |||
| CVE-2026-118782 | < 1.4.1 | Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count | HIGH 7.5 | |||
| CVE-2026-118781 | < 1.4.1 | Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) | LOW 2.9 | |||
| CVE-2026-118780 | < 1.4.1 | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store | LOW 3.7 | |||
| CVE-2026-118779 | < 1.4.1 | Forge: Regular expression denial of service in PEM decoding (pem.decode) | HIGH 7.5 | |||
| CVE-2026-118778 | < 1.4.1 | Forge: TLS client crash when the server sends no certificate | MEDIUM 5.9 | |||
| CVE-2026-118777 | < 1.4.1 | Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie | MEDIUM 4.8 | |||
| CVE-2026-118776 | < 1.4.1 | Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption | LOW 3.7 | |||
| CVE-2026-118775 | < 1.4.1 | Forge: ASN.1 OID first arc truncation in asn1.oidToDer | LOW 3.7 | |||
| CVE-2026-118774 | < 1.4.1 | Forge: Certificate signature verified with the issuer's RSA signature scheme | LOW 3.7 | |||
| CVE-2026-85393 | ≤ 1.4.0 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding | HIGH 8.7 | 0.3 % | ||
| CVE-2026-33896 | < 1.4.0 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) | CRITICAL 9.1 | 0.4 % | ||
| CVE-2026-33895 | < 1.4.0 | Forge has signature forgery in Ed25519 due to missing S > L check | HIGH 7.5 | 0.5 % | ||
| CVE-2026-33894 | < 1.4.0 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra field | HIGH 7.5 | 0.5 % | ||
| CVE-2026-33891 | < 1.4.0 | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input | HIGH 7.5 | 0.6 % | ||
| CVE-2025-66030 | < 1.3.2 | node-forge ASN.1 OID Integer Truncation | MEDIUM 6.3 | 0.3 % | ||
| CVE-2025-66031 | < 1.3.2 | node-forge ASN.1 Unbounded Recursion | HIGH 8.7 | 0.4 % | ||
| CVE-2022-24772 | < 1.3.0 | Improper Verification of Cryptographic Signature in `node-forge` | HIGH 7.5 | 1.1 % | ||
| CVE-2022-24773 | < 1.3.0 | Improper Verification of Cryptographic Signature in `node-forge` | MEDIUM 5.3 | 1.0 % | ||
| CVE-2022-24771 | < 1.3.0 | Improper Verification of Cryptographic Signature in node-forge | HIGH 7.5 | 0.8 % |