npm: Forge: AES-GCM authentication bypass via unvalidated tagLength option

npm: Forge: AES-GCM authentication bypass via unvalidated tagLength option vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-JC66-7Q78-782G Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

EUVD-2026-113341

Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count...

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

npm: Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

npm: Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113365

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message...

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Summary A connection created with forge.tls.createConnection throws an uncaught TypeError from process when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the handshake,...

npm: Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

npm: Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-8HRF-8G6F-7XWP Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Summary A connection created with forge.tls.createConnection throws an uncaught TypeError from process when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the handshake,...

Forge: Denial of service in TLS record processing via call stack exhaustion

Summary Connections created with forge.tls.createConnection processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and process throws RangeError: Maximum...

EUVD-2026-113364

Forge: Denial of service in TLS record processing via call stack exhaustion...

npm: Forge: Denial of service in TLS record processing via call stack exhaustion

npm: Forge: Denial of service in TLS record processing via call stack exhaustion vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-HQQ3-7JHF-C5JX Forge: Denial of service in TLS record processing via call stack exhaustion

Summary Connections created with forge.tls.createConnection processed received TLS records recursively, one stack level per record. A peer can send one chunk of thousands of small records, such as heartbeat records, which are accepted before the handshake, and process throws RangeError: Maximum...

GHSA-5X38-2VFF-X55P Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

Summary node-forge parses certificate extensions with the deprecated OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and forge.pki.verifyCertificateChain used the first extension with that name. A certificate with a forged deprecated-OID extension cA TRUE before its genuine basicConstraints...

EUVD-2026-113347

Forge: X.509 basicConstraints bypass in verifyCertificateChain via deprecated extension OIDs 2.5.29.10 and 2.5.29.13...

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

Summary node-forge parses certificate extensions with the deprecated OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and forge.pki.verifyCertificateChain used the first extension with that name. A certificate with a forged deprecated-OID extension cA TRUE before its genuine basicConstraints...

npm: Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

npm: Forge: X.509 basicConstraints bypass in verifyCertificateChain via deprecated extension OIDs 2.5.29.10 and 2.5.29.13 vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

VulnForge

VulnForge Vulnerability & Exploit Intelligence Tool | Nebula Forge Detection Suite v2 VulnForge aggregates exploit intelligence from ExploitDB, NVD, and Metasploit, maps findings to MITRE ATT&CK techniques, and feeds results directly into the Nebula Forge purple team pipeline — generating hunt...

JndiRemover

JndiRemover A small mod aimed at eliminating the CVE-2021-44228 vulnerability by removing/disabling Jndi in Log4j and intercepting messages containing the text "$jndi:ldap://domainname.com/script", which will be removed. Supported versions of MC: Forge 1.7.10, 1.12.2...

CVE-2026-119597

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin role claim to access /api/admin...