GHSA-5gfm-wpxj-wjgq
High · 8.6CVSS
8.6
EPSS
—
Published
Nov 26, 2025
CISA due date
—
The record
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | node-forge | 0 | 1.3.2 |
| Chainguard | argo-workflow-cli-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflow-cli-3.7 | 0 | 3.7.4-r2 |
| Chainguard | argo-workflow-controller-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflow-controller-3.6-compat | 0 | 3.6.13-r2 |
| Chainguard | argo-workflow-controller-3.7 | 0 | 3.7.4-r2 |
| Chainguard | argo-workflow-controller-3.7-compat | 0 | 3.7.4-r2 |
| Chainguard | argo-workflow-executor-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflow-executor-3.6-compat | 0 | 3.6.13-r2 |
| Chainguard | argo-workflow-executor-3.7 | 0 | 3.7.4-r2 |
| Chainguard | argo-workflow-executor-3.7-compat | 0 | 3.7.4-r2 |
| Chainguard | argo-workflows-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflows-3.7 | 0 | 3.7.4-r2 |
| Chainguard | argo-workflows-known-hosts-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflows-known-hosts-3.7 | 0 | 3.7.4-r2 |
| Chainguard | argo-workflows-ui-3.6 | 0 | 3.6.13-r2 |
| Chainguard | argo-workflows-ui-3.7 | 0 | 3.7.4-r2 |
| Chainguard | jitsucom-jitsu | 0 | 2.11.0-r8 |
| Chainguard | jitsucom-jitsu-console | 0 | 2.11.0-r8 |
| Chainguard | jitsucom-jitsu-rotor | 0 | 2.11.0-r8 |
| Chainguard | kibana-7 | 0 | 7.17.29-r7 |
| Chainguard | kibana-7-bitnami | 0 | 7.17.29-r7 |
| Chainguard | kibana-8.17 | 0 | 8.17.10-r4 |
| Chainguard | kibana-8.17-bitnami | 0 | 8.17.10-r4 |
| Chainguard | kibana-8.17-iamguarded | 0 | 8.17.10-r4 |
| Chainguard | kibana-8.18 | 0 | 8.18.8-r3 |
| Chainguard | kibana-8.18-bitnami | 0 | 8.18.8-r3 |
| Chainguard | kibana-8.18-iamguarded | 0 | 8.18.8-r3 |
| Chainguard | kibana-8.19 | 0 | 8.19.7-r2 |
| Chainguard | kibana-8.19-bitnami | 0 | 8.19.7-r2 |
| Chainguard | kibana-8.19-iamguarded | 0 | 8.19.7-r2 |
| Chainguard | kibana-9.0 | 0 | 9.0.8-r3 |
| Chainguard | kibana-9.0-bitnami | 0 | 9.0.8-r3 |
| Chainguard | kibana-9.0-iamguarded | 0 | 9.0.8-r3 |
| Chainguard | kibana-9.1 | 0 | 9.1.7-r2 |
| Chainguard | kibana-9.1-bitnami | 0 | 9.1.7-r2 |
| Chainguard | kibana-9.1-iamguarded | 0 | 9.1.7-r2 |
| Chainguard | kibana-9.2 | 0 | 9.2.1-r2 |
| Chainguard | kibana-9.2-iamguarded | 0 | 9.2.1-r2 |
| Chainguard | kubeflow-centraldashboard | 0 | 1.10.0-r6 |
| Chainguard | kubeflow-pipelines | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-apiserver | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-cache-deployer | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-cache-deployer-compat | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-cache_server | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-frontend | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-metadata-envoy-config | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-metadata-writer | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-metadata-writer-compat | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-persistence_agent | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-scheduledworkflow | 0 | 2.15.0-r0 |
| Chainguard | kubeflow-pipelines-viewer-crd-controller | 0 | 2.15.0-r0 |
| Chainguard | opensearch-dashboards-2 | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-alerting-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-compat | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-config | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-maps | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-notifications | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-query-workbench | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-reporting | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-search-relevance | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-dashboards-visualizations | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-alerting-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-config | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-maps | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-notifications | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-observability | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-query-workbench | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-reporting | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-search-relevance | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-dashboards-visualizations | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-index-management-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-ml-commons-dashboards | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-security-analytics-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-fips-security-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-index-management-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-ml-commons-dashboards | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-security-analytics-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-2-security-dashboards-plugin | 0 | 2.19.4-r2 |
| Chainguard | opensearch-dashboards-3 | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-alerting-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-config | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-maps | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-notifications | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-observability | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-query-workbench | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-reporting | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-dashboards-search-relevance | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-alerting-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-anomaly-detection-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-config | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-maps | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-notifications | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-observability | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-query-workbench | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-reporting | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-dashboards-search-relevance | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-index-management-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-ml-commons-dashboards | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-security-analytics-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-fips-security-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-index-management-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-ml-commons-dashboards | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-security-analytics-dashboards-plugin | 0 | 3.2.0-r2 |
| Chainguard | opensearch-dashboards-3-security-dashboards-plugin | 0 | 3.2.0-r2 |
| Wolfi | argo-workflow-cli-3.7 | 0 | 3.7.4-r2 |
| Wolfi | argo-workflow-controller-3.7 | 0 | 3.7.4-r2 |
| Wolfi | argo-workflow-controller-3.7-compat | 0 | 3.7.4-r2 |
| Wolfi | argo-workflow-executor-3.7 | 0 | 3.7.4-r2 |
| Wolfi | argo-workflow-executor-3.7-compat | 0 | 3.7.4-r2 |
| Wolfi | argo-workflows-3.7 | 0 | 3.7.4-r2 |
| Wolfi | argo-workflows-known-hosts-3.7 | 0 | 3.7.4-r2 |
| Wolfi | argo-workflows-ui-3.7 | 0 | 3.7.4-r2 |
| Wolfi | jitsucom-jitsu | 0 | 2.11.0-r8 |
| Wolfi | jitsucom-jitsu-console | 0 | 2.11.0-r8 |
| Wolfi | jitsucom-jitsu-rotor | 0 | 2.11.0-r8 |
| Wolfi | kubeflow-centraldashboard | 0 | 1.10.0-r6 |
| Wolfi | kubeflow-pipelines | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-apiserver | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-cache-deployer | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-cache-deployer-compat | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-cache_server | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-frontend | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-metadata-envoy-config | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-metadata-writer | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-metadata-writer-compat | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-persistence_agent | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-scheduledworkflow | 0 | 2.15.0-r0 |
| Wolfi | kubeflow-pipelines-viewer-crd-controller | 0 | 2.15.0-r0 |
| Wolfi | opensearch-dashboards-2 | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-alerting-dashboards-plugin | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-anomaly-detection-dashboards-plugin | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-compat | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-config | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-maps | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-notifications | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-observability | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-query-workbench | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-reporting | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-search-relevance | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-dashboards-visualizations | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-index-management-dashboards-plugin | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-ml-commons-dashboards | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-security-analytics-dashboards-plugin | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-2-security-dashboards-plugin | 0 | 2.19.4-r2 |
| Wolfi | opensearch-dashboards-3 | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-alerting-dashboards-plugin | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-anomaly-detection-dashboards-plugin | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-config | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-maps | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-notifications | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-observability | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-query-workbench | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-reporting | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-dashboards-search-relevance | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-index-management-dashboards-plugin | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-ml-commons-dashboards | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-security-analytics-dashboards-plugin | 0 | 3.2.0-r2 |
| Wolfi | opensearch-dashboards-3-security-dashboards-plugin | 0 | 3.2.0-r2 |
Related vulnerabilities
- CVE-2025-12816 node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator… Same vulnerability
- CVE-2026-33895 Forge (also called `node-forge`) is a native implementation of Transport Layer Security… Also affects node-forge
- CVE-2026-33896 Forge (also called `node-forge`) is a native implementation of Transport Layer Security… Also affects node-forge
- CVE-2026-33894 Forge (also called `node-forge`) is a native implementation of Transport Layer Security… Also affects node-forge
- CVE-2026-33891 Forge (also called `node-forge`) is a native implementation of Transport Layer Security… Also affects node-forge
- GHSA-2328-f5f3-gj25 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280… Also affects node-forge
- GHSA-q67f-28xg-22rw Forge has signature forgery in Ed25519 due to missing S > L check Also affects node-forge
- GHSA-ppp5-5v6c-4jwp Forge has signature forgery in RSA-PKCS due to ASN.1 extra field Also affects node-forge