Exploited: 178
LatestCVE-2026-95731 — Unauthenticated Hardcoded Password Vulnerabilities in HPE Networking Fabric Composer Command-Line Interface allow Unauthorized Administrative Access
VulnFeed.org
AREN

node-forge vulnerabilities and fixes

Exploited and high-severity node-forge vulnerabilities tracked by VulnFeed, with CVSS and EPSS scores, affected versions and fixes.

RSS for this product
  1. 7.5CVE-2026-118779Forge: Regular expression denial of service in PEM decoding (pem.decode)Fix availablenode-forge
    2 min read
  2. 7.5CVE-2026-118782Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countFix availablenode-forge
    2 min read
  3. 7.5CVE-2026-119188Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messageFix availablenode-forge
    2 min read
  4. 7.5CVE-2026-119187Forge: Denial of service in TLS record processing via call stack exhaustionFix availablenode-forge
    2 min read
  5. 7.4CVE-2026-119190Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13Fix availablenode-forge
    2 min read
Esc