CVE-2022-24773

Forge also called "node-forge" is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not properly check "DigestInfo" for a proper ASN.1 structure. This can lead to successful verification with signatures that...