Digital Bazaar vulnerabilities

1 vulnerability

Known vulnerabilities in Digital Bazaar products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

2
PrioritiseCVE-2025-12816digital bazaar · forge +186 moreCVE-2025-12816An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.CVSS8.6HighEPSS0.58%