pkg:npm/node-forge

All known vulnerabilities

• CRITICAL9.8CVE-2020-7720Prototype Pollution in node-forge
  from 0, < 0.10.0
• HIGH8.6CVE-2025-12816node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
  from 0, < 1.3.2
• HIGH7.5CVE-2026-33895Forge has signature forgery in Ed25519 due to missing S > L check
  from 0, < 1.4.0
• HIGH7.5Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
  from 0, < 1.4.0
• HIGH7.5Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
  from 0, < 1.4.0
• HIGH7.5node-forge has ASN.1 Unbounded Recursion
  from 0, < 1.3.2
• HIGH7.5Improper Verification of Cryptographic Signature in node-forge
  from 0, < 1.3.0
• HIGH7.5Improper Verification of Cryptographic Signature in node-forge
  from 0, < 1.3.0
• HIGH7.4Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
  from 0, < 1.4.0
• MEDIUM6.1Open Redirect in node-forge
  from 0, < 1.0.0
• MEDIUM5.3node-forge is vulnerable to ASN.1 OID Integer Truncation
  from 0, < 1.3.2
• MEDIUM5.3Improper Verification of Cryptographic Signature in `node-forge`
  from 0, < 1.3.0