CVE-2022-24771: Improper Verification of Cryptographic Signature in node-forge

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-03-18 · updated 2026-06-17
Weakness: CWE-347

Description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure that steals padding bytes and uses unchecked portion of the PKCS#1 encoded message to forge a signature when a low public exponent is being used. The issue has been addressed in `node-forge` version 1.3.0. There are currently no known workarounds.

Affected products

digitalbazaar forge: before 1.3.0 — fixed in 1.3.0
Npm Node-Forge: before 1.3.0 — fixed in 1.3.0

How to fix

Upgrade to a fixed version: digitalbazaar forge 1.3.0; Npm Node-Forge 1.3.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-24771 or the next vulnerability affects your stack