GHSA-6889-VF6X-F3G5 Forge: Ed25519 signature verification accepts small-order public keys

Summary ed25519.verify does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. Details...

Forge: Ed25519 signature verification accepts small-order public keys

Summary ed25519.verify does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. Details...

CVE-2026-125335

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify decodes a public key in cryptosignopen without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can...

CVE-2026-125335

The Forge (node-forge) JavaScript library is vulnerable in versions prior to 1.4.3 because the ed25519.verify() function fails to reject small-order points or non-canonical encodings when decoding a public key in crypto_sign_open() . An attacker capable of providing a public key can craft signatu...

EUVD-2026-122797

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify decodes a public key in cryptosignopen without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can...

CVE-2026-125335 Forge: Ed25519 signature verification accepts small-order public keys

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify decodes a public key in cryptosignopen without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can...

CVE-2026-125335: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify decodes a public key in cryptosignopen without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can...

Improper Verification of Cryptographic Signature

Overview node-forge is a JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the ed25519.verify function. An attacker can bypas...