Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-12816
8.6
HIGHCVSS v3
Severity scale
010
Description
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.
node-forge
NPMJavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.
NPMJavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.< 1.3.2NVD
digitalbazaar/forge
GitHubA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
GitHubA native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps<= 1.3.1NVD