node-node-forge vulnerabilities (Ubuntu)
27 vulnerabilities.
-
node-node-forgeUbuntu Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer 7.5 High -
node-node-forgeUbuntu Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 7.4 High -
node-node-forgeUbuntu Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage 5.9 Medium -
node-node-forgeUbuntu Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message 7.5 High -
node-node-forgeUbuntu Forge: Denial of service in TLS record processing via call stack exhaustion 7.5 High -
node-node-forgeUbuntu Forge: AES-GCM authentication bypass via unvalidated tagLength option 5.9 Medium -
node-node-forgeUbuntu Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count 7.5 High -
node-node-forgeUbuntu Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) 2.9 Low -
node-node-forgeUbuntu Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store 3.7 Low -
node-node-forgeUbuntu Forge: Regular expression denial of service in PEM decoding (pem.decode) 7.5 High -
node-node-forgeUbuntu Forge: TLS client crash when the server sends no certificate 5.9 Medium -
node-node-forgeUbuntu Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie 4.8 Medium -
node-node-forgeUbuntu Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption 3.7 Low -
node-node-forgeUbuntu Forge: ASN.1 OID first arc truncation in asn1.oidToDer 3.7 Low -
node-node-forgeUbuntu Forge: Certificate signature verified with the issuer's RSA signature scheme 3.7 Low -
node-node-forgeUbuntu Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) 7.4 High -
node-node-forgeUbuntu Forge has signature forgery in Ed25519 due to missing S > L check 7.5 High -
node-node-forgeUbuntu node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding 8.7 High -
node-node-forgeUbuntu Forge has signature forgery in RSA-PKCS due to ASN.1 extra field 7.5 High -
node-node-forgeUbuntu Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input 7.5 High -
node-node-forgeUbuntu node-forge ASN.1 Unbounded Recursion 8.7 High -
node-node-forgeUbuntu CVE-2025-12816 8.6 High -
node-node-forgeUbuntu Improper Verification of Cryptographic Signature in `node-forge` 7.5 High -
node-node-forgeUbuntu Improper Verification of Cryptographic Signature in node-forge 7.5 High -
node-node-forgeUbuntu node-forge ASN.1 OID Integer Truncation 6.3 Medium -
node-node-forgeUbuntu Improper Verification of Cryptographic Signature in `node-forge` 5.3 Medium -
node-node-forgeUbuntu Prototype Pollution 9.8 Critical