CVE-2026-125335

A flaw was found in node-forge. The library's digital signature verification does not properly reject weak or invalid public keys when validating Ed25519 signatures. A remote attacker who can provide an untrusted public key can exploit this issue to create signatures that appear valid for arbitra...