Product by Digitalbazaar

    Forge

    28 known vulnerabilities in Forge (Digitalbazaar), 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Forge (Digitalbazaar)
    CriticalCVE-2020-7720

    Prototype Pollution

    		9.8
    HighCVE-2026-118779

    Forge: Regular expression denial of service in PEM decoding (pem.decode)

    		7.5
    HighCVE-2026-119191

    Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

    		7.5
    HighCVE-2026-119187

    Forge: Denial of service in TLS record processing via call stack exhaustion

    		7.5
    HighCVE-2026-119188

    Digitalbazaar Forge: Uncaught Exception

    		7.5
    HighCVE-2025-12816

    Digital Bazaar Node-forge: security vulnerability

    		8.6
    HighCVE-2022-24772

    Improper Verification of Cryptographic Signature in `node-forge`

    		7.5
    HighCVE-2026-33891

    Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

    		7.5
    HighCVE-2026-85393

    node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding

    		7.5
    HighCVE-2026-119190

    Digitalbazaar Forge: Improper Certificate Validation

    		7.4
    HighCVE-2026-33895

    Forge has signature forgery in Ed25519 due to missing S > L check

    		7.5
    CriticalCVE-2026-33896

    Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

    		9.1
    HighCVE-2025-66031

    node-forge ASN.1 Unbounded Recursion

    also in 2 other products

    		7.5
    HighCVE-2026-118782

    Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

    		7.5
    HighCVE-2026-33894

    Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

    		7.5
    HighCVE-2022-24771

    Improper Verification of Cryptographic Signature in node-forge

    		7.5
    MediumCVE-2026-119186

    Forge: AES-GCM authentication bypass via unvalidated tagLength option

    		5.9
    MediumCVE-2026-118778

    Forge: TLS client crash when the server sends no certificate

    		5.9
    MediumCVE-2026-119189

    Digitalbazaar Forge: Improper Certificate Validation

    		5.9
    MediumCVE-2022-24773

    Improper Verification of Cryptographic Signature in `node-forge`

    		5.3
    MediumCVE-2026-118777

    Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

    		4.8
    MediumCVE-2022-0122

    Open Redirect in digitalbazaar/forge

    		5.3
    MediumCVE-2026-118775

    Forge: ASN.1 OID first arc truncation in asn1.oidToDer

    		3.7
    MediumCVE-2025-66030

    node-forge ASN.1 OID Integer Truncation

    		5.3
    LowCVE-2026-118780

    Digitalbazaar Forge: Improper Certificate Validation

    		3.7

    All vulnerabilities in search

    All products by Digitalbazaar