FO
Product
forge
28
CVEs
0
On KEV
9.1
Max CVSS
15
New 30D
Severity mix
Critical 1High 15Medium 7Low 5
Watch
Add forge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-118780 New | 3.7 | Oct 29 | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store Affected: < 1.4.1 |
| CVE-2026-118776 New | 3.7 | Oct 29 | Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption Affected: < 1.4.1 |
| CVE-2026-118775 New | 3.7 | Oct 29 | Forge: ASN.1 OID first arc truncation in asn1.oidToDer Affected: < 1.4.1 |
| CVE-2026-118774 New | 3.7 | Oct 29 | Forge: Certificate signature verified with the issuer's RSA signature scheme Affected: < 1.4.1 |
| CVE-2026-118781 New | 2.9 | Oct 29 | Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891) Affected: < 1.4.1 |
Showing 5