| CVE-2026-119191 |
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-119190 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.4
High
|
Oct 29, 2026 |
| CVE-2026-119189 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-119188 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-119187 |
Forge: Denial of service in TLS record processing via call stack exhaustion
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-119186 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-118782 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-118781 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
2.9
Low
|
Oct 29, 2026 |
| CVE-2026-118780 |
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
|
3.7
Low
|
Oct 29, 2026 |
| CVE-2026-118779 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-118778 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Medium
|
Oct 29, 2026 |
| CVE-2026-118777 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
4.8
Medium
|
Oct 29, 2026 |
| CVE-2026-118776 |
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
|
3.7
Low
|
Oct 29, 2026 |
| CVE-2026-118775 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
3.7
Low
|
Oct 29, 2026 |
| CVE-2026-118774 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
3.7
Low
|
Oct 29, 2026 |
| CVE-2026-85393 |
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5…
|
8.7
High
|
Sep 3, 2026 |
| CVE-2026-33896 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.4
High
|
Mar 27, 2026 |
| CVE-2026-33895 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Mar 27, 2026 |
| CVE-2026-33894 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Mar 27, 2026 |
| CVE-2026-33891 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Mar 27, 2026 |
| CVE-2025-66030 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
6.3
Medium
|
Nov 26, 2025 |
| CVE-2025-66031 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
8.7
High
|
Nov 26, 2025 |
| CVE-2022-24772 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Mar 18, 2022 |
| CVE-2022-24773 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
5.3
Medium
|
Mar 18, 2022 |
| CVE-2022-24771 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
High
|
Mar 18, 2022 |