| CVE-2026-119191 |
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-119190 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.4
Élevée
|
29 oct. 2026 |
| CVE-2026-119189 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Moyenne
|
29 oct. 2026 |
| CVE-2026-119188 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-119187 |
Forge: Denial of service in TLS record processing via call stack exhaustion
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-119186 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Moyenne
|
29 oct. 2026 |
| CVE-2026-118782 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-118781 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
2.9
Faible
|
29 oct. 2026 |
| CVE-2026-118780 |
Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
|
3.7
Faible
|
29 oct. 2026 |
| CVE-2026-118779 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
29 oct. 2026 |
| CVE-2026-118778 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
5.9
Moyenne
|
29 oct. 2026 |
| CVE-2026-118777 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
4.8
Moyenne
|
29 oct. 2026 |
| CVE-2026-118776 |
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
|
3.7
Faible
|
29 oct. 2026 |
| CVE-2026-118775 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
3.7
Faible
|
29 oct. 2026 |
| CVE-2026-118774 |
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript
|
3.7
Faible
|
29 oct. 2026 |
| CVE-2026-85393 |
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5…
|
8.7
Élevée
|
3 sept. 2026 |
| CVE-2026-33896 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.4
Élevée
|
27 mars 2026 |
| CVE-2026-33895 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
27 mars 2026 |
| CVE-2026-33894 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
27 mars 2026 |
| CVE-2026-33891 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
27 mars 2026 |
| CVE-2025-66030 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
6.3
Moyenne
|
26 nov. 2025 |
| CVE-2025-66031 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
8.7
Élevée
|
26 nov. 2025 |
| CVE-2022-24772 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
18 mars 2022 |
| CVE-2022-24773 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
5.3
Moyenne
|
18 mars 2022 |
| CVE-2022-24771 |
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
|
7.5
Élevée
|
18 mars 2022 |