Improper Verification of Cryptographic Signature in `node-forge`

MEDIUM 5.3CVE-2022-24773 · GHSA-2r2c-g63r-vccr · Published 18/03/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
forge digitalbazaar	`< 1.3.0`	`1.3.0`
node-forge npm	`< 1.3.0`	`1.3.0`

Description

Impact

RSA PKCS#1 v1.5 signature verification code is not properly checking DigestInfo for a proper ASN.1 structure. This can lead to successful verification with signatures that contain invalid structures but a valid digest.

Patches

The issue has been addressed in node-forge 1.3.0.

For more information

If you have any questions or comments about this advisory:

Open an issue in forge
Email us at example email address

NVD description

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `DigestInfo` for a proper ASN.1 structure. This can lead to successful verification with signatures that contain invalid structures but a valid digest. The issue has been addressed in `node-forge` version 1.3.0. There are currently no known workarounds.

References

digitalbazaar/forge security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2022-24773 · ADVISORY
digitalbazaar/forge commit 3f0b49a · WEB
digitalbazaar/forge commit bb822c0 · WEB
digitalbazaar/forge · PACKAGE

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free