PT-2025-48075

CVE-2025-12816

Published

2025-11-25

Updated

2026-10-30

Description by

CVSS 3.1

8.6

High

MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions node-forge versions 1.3.1 and earlier

Description An interpretation-conflict issue exists in node-forge. Unauthenticated attackers can create specific ASN.1 structures that disrupt schema validations. This can lead to a difference in how data is understood, potentially bypassing cryptographic checks and security measures.

Recommendations Update node-forge to a version later than 1.3.1.

Exploitability

Exploit

Fix

Researchers

Wodzen

Vendors

Affected products

Weakness enumeration

CWE-436: Interpretation Conflict

CWE-670: Always-Incorrect Control Flow Implementation

Related identifiers