Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses node-forge which is vulnerable to CVE-2025-66030, CVE-2025-66031

Summary IBM Maximo Application Suite - Visual Inspection component uses node-forge which is vulnerable to CVE-2025-66030, CVE-2025-66031, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2025-66030 DESCRIPTION: Forge also called...

CVE-2025-66030

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. An Integer Overflow vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be...

CVE-2025-66030 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-centraldashboard, opensearch-dashboards, kubeflow-pipelines, kubeflow-katib, jitsucom-jitsu...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: SNYK:JS-NODEFORGE-14125097...

-fides-amor-et-lux (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +41697 more potentially affected by CVE-2025-66030 via node-forge (>=0.1.15, <=1.3.1)

node-forge NPM version =0.1.15, =1.0.1, =1.1.0 - 00ld8nuivn 2.1.0 - 00rqiw31nd 2.1.0 - 01dk01majk 2.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 0726react 0.1.1 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 and...

CVE-2025-66030

Removed by vendor...

-fides-amor-et-lux (1.0.0), 20_nogo (>=1.0.0, <=1.1.4) +1103 more potentially affected by CVE-2025-66030 via node-forge (>=1.0.0, <=1.3.1)

node-forge NPM version =1.0.0, =1.0.0, =7.10.2-para-beta.0, =1.3.0-patch.0, =1.1.0, =1.2.1, =1.0.0, =1.2.6, =1.23.2, =3.0.0-alpha.0, =3.1.0, =3.13.0 and more Source cves: CVE-2025-66030 Source advisory: OSV:GHSA-65CH-62R8-G69G...