723 matches found
UBUNTU-CVE-2025-12816
An interpretation-conflict CWE-436 vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions...
Interpretation Conflict
Overview org.webjars.npm:node-forge is a WebJar for node-forge. Affected versions of this package are vulnerable to Interpretation Conflict via the asn1.validate function. An attacker can cause schema validation to become desynchronized, resulting in semantic divergence that may allow bypassing...
PT-2025-48075
Name of the Vulnerable Software and Affected Versions node-forge versions 1.3.1 and earlier Description An interpretation-conflict issue exists in node-forge. Unauthenticated attackers can create specific ASN.1 structures that disrupt schema validations. This can lead to a difference in how data ...
Forge JavaScript library impacted by a vulnerability in signature verification.
Overview The Forge JavaScript library provides TLS-related cryptographic utilities. A vulnerability that allows signature verification to be bypassed through crafted manipulation of ASN.1 structures, particularly in fields such as Message Authentication Code MAC data, was identified. Users of the...
The vulnerability of the Go programming languageās encoding/ASN1 component, which allows a hacker to trigger a service failure.
The vulnerability of the Go programming languageās encoding/ASN1 component is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
EUVD-2025-178451
Malicious code in import-abstract-nu-private-decrypt npm...
EUVD-2025-180521
Malicious code in abstract-interface-stub-delta-cloud npm...
EUVD-2025-178859
Malicious code in fork-secure-code-daemon-abstract npm...
EUVD-2025-176391
Malicious code in sigma-awk-abstract-error-kappa npm...
EUVD-2025-180175
Malicious code in awk-node-abstract-interpret-alert npm...
EUVD-2025-179763
Malicious code in char-alert-abstract-decrypt-test npm...
EUVD-2025-180520
Malicious code in abstract-mu-kappa-authenticate-decode npm...
Malicious code in analyze-abstract-hash-code-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in abstract-hash-key-report-load (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af67a09c9ac8b1f5a97cb010cec5f8683ef9b54771520fa4630f0ba372d1ba86 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
MAL-2025-185448 Malicious code in analyze-abstract-hash-code-iota (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94747fbea6244359c0e5f32c8af9461dfd765fc51d10bca1d94dd3e3f0cef6b8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-180519
Malicious code in abstract-wind-sed-void-chi npm...
EUVD-2025-177320
Malicious code in parse-abstract-beta-rain-benchmark npm...