CVE-2025-66030

Name of the Vulnerable Software and Affected Versions node-forge versions 1.3.1 and below

Description An Integer Overflow issue exists in node-forge, a native implementation of Transport Layer Security in JavaScript. The flaw resides in the parsing of ASN.1 structures containing OIDs with oversized arcs. Due to 32-bit bitwise truncation during decoding, these arcs may be interpreted as smaller, trusted OIDs, potentially bypassing security checks reliant on OID-based decisions.

Recommendations Update to node-forge version 1.3.2 or later.