Digitalbazaar
3 CVEs tracked since 2022. Since Mar 2022, none of them reached CISA KEV.
Digitalbazaar CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-03 | 3 | 0 |
Products
The products that kept showing up in Digitalbazaar's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 14 most recently published vulnerabilities affecting Digitalbazaar.
- CVE-2026-85393node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Padding7.5
- CVE-2026-33896Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)7.4
- CVE-2026-33895Forge has signature forgery in Ed25519 due to missing S > L check7.5
- CVE-2026-33894Forge has signature forgery in RSA-PKCS due to ASN.1 extra field7.5
- CVE-2026-33891Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input7.5
- CVE-2025-66030node-forge ASN.1 OID Integer Truncation5.3
- CVE-2025-66031node-forge ASN.1 Unbounded Recursion7.5
- CVE-2025-12816CVE-2025-128168.6
- CVE-2024-31995zcap has incomplete expiration checks in capability chains.4.3
- CVE-2022-24772Improper Verification of Cryptographic Signature in `node-forge`7.5
- CVE-2022-24773Improper Verification of Cryptographic Signature in `node-forge`5.3
- CVE-2022-24771Improper Verification of Cryptographic Signature in node-forge7.5
- CVE-2022-0122Open Redirect in digitalbazaar/forge6.1
- CVE-2020-7720Prototype Pollution9.8
The record
- Peak rank
- #183 in Mar 2022
- Busiest month shown
- Mar 2022, 3 CVEs
- Months with a KEV entry
- 0 since Mar 2022
- Monthly snapshots
- 1 since 2022