Advisories · Technology
digitalbazaar forge.
Every CVE that names digitalbazaar forge among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
- digitalbazaar forge
- Denial of service
- CVSS 5.9 Medium
Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
- digitalbazaar forge
- Weak cryptography or TLS
- CVSS 3.7 Low
Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
- digitalbazaar forge
- CWE-20
- CWE-354
- CVSS 3.7 Low
Forge: Certificate signature verified with the issuer's RSA signature scheme
- digitalbazaar forge
- Weak cryptography or TLS