VDB
BDU%3A2025-15402
BDU%3A2025-15402
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость функции asn1.validate() сценария forge/lib/asn1.js набора криптографических утилит и инструментов для разработки веб-приложений Forge, позволяющая нарушителю обойти ограничения безопасности
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Digital Bazaar, Inc. | Forge |
Timeline
- Dec 8, 2025 CVE Published
- Jan 12, 2026 CVE Updated
References
- https://www.kb.cert.org/vuls/id/521113 url
- https://github.com/microsoft/azurelinux/pull/15208 url
- https://github.com/digitalbazaar/forge/pull/1124 url
- https://github.com/digitalbazaar/forge/releases/tag/v1.3.2 advisory
- https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq url
- https://github.com/digitalbazaar/forge/commit/235ad3e70e4fdfdca4fdeb662dfba6588e2c38bd advisory
- https://github.com/microsoft/azurelinux/commit/d66c8749f2fafcb82917362ee519a746edde5d5f advisory