digitalbazaar kayıtları
digitalbazaar üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-347 Improper Verification of Cryptographic Signature4
- CWE-190 Integer Overflow or Wraparound1
- CWE-20 Improper Input Validation1
- CWE-295 Improper Certificate Validation1
- CWE-436 Interpretation Conflict1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-33896İstismar yok | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)digitalbazaar · forge · CWE-295 | Kritik9,1 | — | %0,5 | 27 Mar 2026 |
34İzleyin | CVE-2025-12816İstismar yok | An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1digitalbazaar · forge · CWE-436 | Yüksek8,6 | — | %0,7 | 25 Kas 2025 |
34İzleyin | CVE-2025-66031İstismar yok | node-forge ASN.1 Unbounded Recursiondigitalbazaar · forge · CWE-674 | Yüksek8,7 | — | %0,4 | 26 Kas 2025 |
30İzleyin | CVE-2020-7720İstismar yok | The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function.digitalbazaar · forge · CWE-1321 | Yüksek7,3 | — | %3,2 | 1 Eyl 2020 |
30İzleyin | CVE-2022-24772İstismar yok | Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar · forge · CWE-347 | Yüksek7,5 | — | %1,1 | 18 Mar 2022 |
30İzleyin | CVE-2026-33891İstismar yok | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Inputdigitalbazaar · forge · CWE-835 | Yüksek7,5 | — | %0,9 | 27 Mar 2026 |
30İzleyin | CVE-2022-24771İstismar yok | Improper Verification of Cryptographic Signature in node-forgedigitalbazaar · forge · CWE-347 | Yüksek7,5 | — | %0,8 | 18 Mar 2022 |
30İzleyin | CVE-2026-33895İstismar yok | Forge has signature forgery in Ed25519 due to missing S > L checkdigitalbazaar · forge · CWE-347 | Yüksek7,5 | — | %0,5 | 27 Mar 2026 |
30İzleyin | CVE-2026-33894İstismar yok | Forge has signature forgery in RSA-PKCS due to ASN.1 extra fielddigitalbazaar · forge · CWE-20 | Yüksek7,5 | — | %0,4 | 27 Mar 2026 |
25İzleyin | CVE-2025-66030İstismar yok | node-forge ASN.1 OID Integer Truncationdigitalbazaar · forge · CWE-190 | Orta6,3 | — | %0,3 | 26 Kas 2025 |
24İzleyin | CVE-2022-0122İstismar yok | Open Redirect in digitalbazaar/forgedigitalbazaar · forge · CWE-601 | Orta6,1 | — | %0,8 | 6 Oca 2022 |
21İzleyin | CVE-2022-24773İstismar yok | Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar · forge · CWE-347 | Orta5,3 | — | %1,0 | 18 Mar 2022 |
- CVE-2026-3389636İzleyin
Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
KritikCVSS 9,1İstismar yokEPSS %1digitalbazaar · forge27 Mar 2026
- CVE-2025-1281634İzleyin
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1
YüksekCVSS 8,6İstismar yokEPSS %1digitalbazaar · forge25 Kas 2025
- CVE-2025-6603134İzleyin
node-forge ASN.1 Unbounded Recursion
YüksekCVSS 8,7İstismar yokEPSS %0digitalbazaar · forge26 Kas 2025
- CVE-2020-772030İzleyin
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function.
YüksekCVSS 7,3İstismar yokEPSS %3digitalbazaar · forge1 Eyl 2020
- CVE-2022-2477230İzleyin
Improper Verification of Cryptographic Signature in `node-forge`
YüksekCVSS 7,5İstismar yokEPSS %1digitalbazaar · forge18 Mar 2022
- CVE-2026-3389130İzleyin
Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
YüksekCVSS 7,5İstismar yokEPSS %1digitalbazaar · forge27 Mar 2026
- CVE-2022-2477130İzleyin
Improper Verification of Cryptographic Signature in node-forge
YüksekCVSS 7,5İstismar yokEPSS %1digitalbazaar · forge18 Mar 2022
- CVE-2026-3389530İzleyin
Forge has signature forgery in Ed25519 due to missing S > L check
YüksekCVSS 7,5İstismar yokEPSS %0digitalbazaar · forge27 Mar 2026
- CVE-2026-3389430İzleyin
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
YüksekCVSS 7,5İstismar yokEPSS %0digitalbazaar · forge27 Mar 2026
- CVE-2025-6603025İzleyin
node-forge ASN.1 OID Integer Truncation
OrtaCVSS 6,3İstismar yokEPSS %0digitalbazaar · forge26 Kas 2025
- CVE-2022-012224İzleyin
Open Redirect in digitalbazaar/forge
OrtaCVSS 6,1İstismar yokEPSS %1digitalbazaar · forge6 Oca 2022
- CVE-2022-2477321İzleyin
Improper Verification of Cryptographic Signature in `node-forge`
OrtaCVSS 5,3İstismar yokEPSS %1digitalbazaar · forge18 Mar 2022