What’s Vulnerable › Products

digitalbazaar forge vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your digitalbazaar forge version is affected

Latest digitalbazaar forge vulnerabilities

• CVE-2026-85393 — node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding (CVSS 7.5)
• CVE-2026-33896 — Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation) (CVSS 9.1)
• CVE-2026-33895 — Forge has signature forgery in Ed25519 due to missing S > L check (CVSS 7.5)
• CVE-2026-33894 — Forge has signature forgery in RSA-PKCS due to ASN.1 extra field (CVSS 7.5)
• CVE-2026-33891 — Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input (CVSS 7.5)
• CVE-2025-66031 — node-forge ASN.1 Unbounded Recursion (CVSS 7.5)
• CVE-2025-66030 — node-forge ASN.1 OID Integer Truncation (CVSS 5.3)
• CVE-2025-12816 — CVE-2025-12816 (CVSS 8.6)
• CVE-2022-24773 — Improper Verification of Cryptographic Signature in `node-forge` (CVSS 5.3)
• CVE-2022-24772 — Improper Verification of Cryptographic Signature in `node-forge` (CVSS 7.5)
• CVE-2022-24771 — Improper Verification of Cryptographic Signature in node-forge (CVSS 7.5)
• CVE-2022-0122 — Open Redirect in digitalbazaar/forge (CVSS 6.1)
• CVE-2020-7720 — Prototype Pollution (CVSS 7.3)