Vulnerabilities in digitalbazaar
27 resultsCVE-2026-118778MEDIUMForge: TLS client crash when the server sends no certificateEPSS 0.2%CVE-2026-118780LOWForge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storeEPSS 0.2%CVE-2026-119189MEDIUMForge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsageEPSS 0.2%CVE-2026-118776LOWForge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptionEPSS 0.1%CVE-2026-118782HIGHForge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countEPSS 0.1%CVE-2026-118781LOWForge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)EPSS 0.1%CVE-2026-118774LOWForge: Certificate signature verified with the issuer's RSA signature schemeEPSS 0.1%