Prototype Pollution in node-forge

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-7720 · ADVISORY
• digitalbazaar/forge commit 6a1e3ef · WEB
• digitalbazaar/forge · PACKAGE
• digitalbazaar/forge · WEB
• digitalbazaar/forge · WEB
• snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-609293 · WEB
• snyk.io/vuln/SNYK-JS-NODEFORGE-598677 · WEB

forge のその他の脆弱性

• CVE-2026-33896緊急 9.1Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, `pki.verifyCe…
• CVE-2026-33895高 7.5Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signa…
• CVE-2026-33894高 7.5Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1…
• CVE-2026-33891高 7.5Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, a Denial of S…
• CVE-2025-66031高 7.5Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerabili…