267298 matches found
CVE-2026-119190 Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs 2.5.29.10 and 2.5.29.13 as basicConstraints, and pki.verifyCertificateChain used the first extension with that name. Exploitation requires...
CVE-2026-119190
The Forge (node-forge) JavaScript TLS library versions prior to 1.4.1 contain a vulnerability in pki.verifyCertificateChain() where deprecated extension OIDs 2.5.29.10 and 2.5.29.13 are incorrectly parsed as basicConstraints . This oversight allows an attacker to bypass certificate constraints by...
CVE-2026-119189
The node-forge (Forge) JavaScript library, prior to version 1.4.1 , fails to enforce the X.509 pathLenConstraint for CA certificates that do not include a keyUsage extension. This vulnerability in the pki.verifyCertificateChain() function allows an attacker who possesses a path-length-constrained...
CVE-2026-119188
The Forge (also known as node-forge ) JavaScript TLS implementation is vulnerable to a Denial of Service (DoS) condition in versions prior to 1.4.1 . The root cause lies in how forge.tls.createConnection() handles fragmented handshake messages; the library continues processing after a TLS record ...
EUVD-2026-113363
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start during decryption through forge.cipher.createDecipher. When an application derived tagLength from received da...
CVE-2026-119186 Forge: AES-GCM authentication bypass via unvalidated tagLength option
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start during decryption through forge.cipher.createDecipher. When an application derived tagLength from received da...
CVE-2026-119186
The node-forge (Forge) JavaScript TLS implementation contains an AES-GCM authentication bypass in versions prior to 1.4.1 . The vulnerability stems from a failure to validate the tagLength option in forge.cipher.createDecipher().start(). If an application derives tagLength from received data or u...
CVE-2026-118779
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...
node-vulnerable
node-vulnerable This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately exploitable. EXPOSURE will report an exploitable verdict against it. Tracked CVEs: CVE-2018-21268 — traceroute command injection via the host argument. Exploitable in this baselin...
Stowaway
Stowaway Stowaway is a multi-hop proxy tool for security researchers and penetration testers. Stowaway lets you proxy external traffic through multiple hops into a target internal network, bypassing access restrictions, building a tree-like node topology, and managing it easily. Thanks for the...
CVE-2026-118782
The Forge (node-forge) JavaScript library, prior to version 1.4.1 , is vulnerable to a flaw where it accepts a PKCS#12 MAC or password-based encryption iteration count of zero or less. This causes pki.pbe.generatePkcs12Key() to return a constant key regardless of the provided password and salt. C...
CVE-2026-118780
The Forge (also known as node-forge ) JavaScript TLS implementation is vulnerable to a persistent availability impact in versions prior to 1.4.1 . The root cause is that the pki.verifyCertificateChain() and pki.createCaStore() functions improperly handle duplicate subject names . Specifically, th...
ROOT-APP-NPM-CVE-2026-5079 CVE-2026-5079 in multer - Patched by Root
Root has patched CVE-2026-5079 in the multer package for Root:npm. Multiple fixed versions available...
EUVD-2026-113337
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...
CVE-2026-118776
The Forge (or node-forge ) JavaScript library, a native implementation of Transport Layer Security, contains an incomplete PKCS#7 padding validation vulnerability in versions prior to 1.4.1 . When using CBC and ECB modes, the decipher.finish() function only validates the final byte of the padding...
CVE-2026-118774
The Forge (node-forge) JavaScript TLS library, prior to version 1.4.1 , contains a vulnerability in the certificate.verify(child), _verifySignature(), and lib/x509.js components. The library incorrectly selects RSA padding and RSASSA-PSS parameters from the issuer certificate instead of the child...
node-prompt-here
node-prompt-here This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2020-7602 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE...
POC-CVE-2018-0114
POC-CVE-2018-0114 This repository contains the POC of an exploit for node-jose Stating from the last merge python lib: base64,urllib,rsa,sys Running the tests To run the script just run the following command: python jwk-node-jose.py "payload" key-size key-size whitout Authors Andrea Cappa -...
renode
Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...