digitalbazaar forge güvenlik açıkları
digitalbazaar
- Toplam açık
- 15
- Kritik
- 0
- Aktif istismar
- 0
- Yaması çıkan
- 15
- Son açık
- 14 sa önce
Önem dağılımı
- Kritik 0
- Yüksek 6
- Orta 4
- Düşük 5
Son açıklar
15 açık
- 7,5Yüksek CVE-2026-119191Yama var Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
- 7,4Yüksek CVE-2026-119190Yama var Forge (node-forge): verifyCertificateChain üzerinde basicConstraints atlatma açığı
- 5,9Orta CVE-2026-119189Yama var Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
- 7,5Yüksek CVE-2026-119188Yama var Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message
- 7,5Yüksek CVE-2026-119187Yama var Forge: Denial of service in TLS record processing via call stack exhaustion
- 5,9Orta CVE-2026-119186Yama var Forge (node-forge) AES-GCM tagLength doğrulanmadığı için kimlik doğrulama atlatma açığı
- 7,5Yüksek CVE-2026-118782Yama var Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count
- 2,9Düşük CVE-2026-118781Yama var Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)
- 3,7Düşük CVE-2026-118780Yama var Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store
- 7,5Yüksek CVE-2026-118779Yama var Forge (node-forge) PEM çözümlemesinde regüler ifade kaynaklı hizmet reddi (ReDoS)
- 5,9Orta CVE-2026-118778Yama var Forge: TLS client crash when the server sends no certificate
- 4,8Orta CVE-2026-118777Yama var Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie
- 3,7Düşük CVE-2026-118776Yama var Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
- 3,7Düşük CVE-2026-118775Yama var Forge: ASN.1 OID first arc truncation in asn1.oidToDer
- 3,7Düşük CVE-2026-118774Yama var Forge: Certificate signature verified with the issuer's RSA signature scheme