Vulnerabilities in digitalbazaar
27 resultsCVE-2022-24772HIGHImproper Verification of Cryptographic Signature in `node-forge`EPSS 1.1%CVE-2022-24773MEDIUMImproper Verification of Cryptographic Signature in `node-forge`EPSS 1.0%CVE-2022-0122MEDIUMOpen Redirect in digitalbazaar/forgeEPSS 0.9%CVE-2022-24771HIGHImproper Verification of Cryptographic Signature in node-forgeEPSS 0.8%CVE-2026-33891HIGHForge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero InputEPSS 0.6%CVE-2026-118779HIGHForge: Regular expression denial of service in PEM decoding (pem.decode)EPSS 0.6%CVE-2026-33895HIGHForge has signature forgery in Ed25519 due to missing S > L checkEPSS 0.5%CVE-2026-33894HIGHForge has signature forgery in RSA-PKCS due to ASN.1 extra fieldEPSS 0.5%CVE-2025-66031HIGHnode-forge ASN.1 Unbounded RecursionEPSS 0.4%CVE-2024-31995MEDIUMzcap has incomplete expiration checks in capability chains.EPSS 0.4%CVE-2026-119191HIGHForge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerEPSS 0.4%CVE-2026-119187HIGHForge: Denial of service in TLS record processing via call stack exhaustionEPSS 0.4%CVE-2026-119188HIGHForge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageEPSS 0.4%CVE-2026-33896HIGHForge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)EPSS 0.4%CVE-2025-66030MEDIUMnode-forge ASN.1 OID Integer TruncationEPSS 0.3%CVE-2026-118775LOWForge: ASN.1 OID first arc truncation in asn1.oidToDerEPSS 0.3%CVE-2026-118777MEDIUMForge: Prototype Pollution in forge.http cookie handling via a malicious Set-CookieEPSS 0.3%CVE-2026-85393HIGHnode-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm PaddingEPSS 0.2%CVE-2026-119190HIGHForge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13EPSS 0.2%CVE-2026-119186MEDIUMForge: AES-GCM authentication bypass via unvalidated tagLength optionEPSS 0.2%