CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/10/2026 |
| CVE-2026-118780 | LOW3.7 | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store | 30/10/2026 |
| CVE-2026-119186 | MEDIUM5.9 | Forge: AES-GCM authentication bypass via unvalidated tagLength option | 30/10/2026 |
| CVE-2026-118782 | HIGH7.5 | Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count | 30/10/2026 |
| CVE-2026-119188 | HIGH7.5 | Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message | 30/10/2026 |
| CVE-2026-119187 | HIGH7.5 | Forge: Denial of service in TLS record processing via call stack exhaustion | 30/10/2026 |
| CVE-2026-119190 | HIGH7.4 | Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 | 30/10/2026 |
| CVE-2026-33896 | CRITICAL9.1 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the `basicConstraints` and `keyUsage` extensions. This allows | 27/03/2026 |
| CVE-2026-33895 | HIGH7.5 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signature verification accepts forged non-canonical signatures where the scalar S is not reduced modulo the group order (`S >= L`). A valid signature and its `S + L` variant both verify | 27/03/2026 |
| CVE-2026-33894 | HIGH7.5 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures by stuffing “garbage” bytes within the ASN structure in or | 27/03/2026 |
| CVE-2026-33891 | HIGH7.5 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, a Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInteger.modInverse() function (inherited from the bundled jsbn library). When modInver | 27/03/2026 |
| CVE-2025-66031 | HIGH7.5 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial- | 26/11/2025 |
| CVE-2025-66030 | MEDIUM5.3 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, t | 26/11/2025 |
| CVE-2025-12816 | HIGH8.6 | An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions. | 25/11/2025 |
| CVE-2022-24773 | MEDIUM5.3 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `DigestInfo` for a proper ASN.1 structure. This can lead to successful verification with signatures that contain invalid stru | 18/03/2022 |
| CVE-2022-24772 | HIGH7.5 | Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. This can allow padding bytes to be removed and garbage data a | 18/03/2022 |