This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [node-forge](https://redirect.github.com/digitalbazaar/forge) | [`1.3.1` → `1.3.2`](https://renovatebot.com/diffs/npm/node-forge/1.3.1/1.3.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/node-forge/1.3.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/node-forge/1.3.1/1.3.2?slim=true) | --- ### node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization [CVE-2025-12816](https://nvd.nist.gov/vuln/detail/CVE-2025-12816) / [GHSA-5gfm-wpxj-wjgq](https://redirect.github.com/advisories/GHSA-5gfm-wpxj-wjgq)

More information

#### Details ##### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions. ##### Details A critical ASN.1 validation bypass vulnerability exists in the node-forge asn1.validate function within `forge/lib/asn1.js`. ASN.1 is a schema language that defines data structures, like the typed record schemas used in X.509, PKCS#7, PKCS#12, etc. DER (Distinguished Encoding Rules), a strict binary encoding of ASN.1, is what cryptographic code expects when verifying signatures, and the exact bytes and structure must match the schema used to compute and verify the signature. After deserializing DER, Forge uses static ASN.1 validation schemas to locate the signed data or public key, compute digests over the exact bytes required, and feed digest and signature fields into cryptographic primitives. This vulnerability allows a specially crafted ASN.1 object to desynchronize the validator on optional boundaries, causing a malformed optional field to be semantically reinterpreted as the subsequent mandatory structure. This manifests as logic bypasses in cryptographic algorithms and protocols with optional security features (such as PKCS#12, where MACs are treated as absent) and semantic interpretation conflicts in strict protocols (such as X.509, where fields are read as the wrong type). ##### Impact This flaw allows an attacker to desynchronize the validator, allowing critical components like digital signatures or integrity checks to be skipped or validated against attacker-controlled data. This vulnerability impacts the `ans1.validate` function in `node-forge` before patched version `1.3.2`. https://github.com/digitalbazaar/forge/blob/main/lib/asn1.js. The following components in `node-forge` are impacted. [lib/asn1.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/asn1.js#L1153) [lib/x509.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/x509.js#L667) [lib/pkcs12.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs12.js#L328) [lib/pkcs7.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs7.js#L90) [lib/rsa.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/rsa.js#L1167) [lib/pbe.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pbe.js#L363) [lib/ed25519.js](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/ed25519.js#L81) Any downstream application using these components is impacted. These components may be leveraged by downstream applications in ways that enable full compromise of integrity, leading to potential availability and confidentiality compromises. #### Severity - CVSS Score: 8.7 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N` #### References - [https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq) - [https://github.com/digitalbazaar/forge/pull/1124](https://redirect.github.com/digitalbazaar/forge/pull/1124) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/asn1.js#L1153](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/asn1.js#L1153) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/ed25519.js#L81](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/ed25519.js#L81) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pbe.js#L363](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pbe.js#L363) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs12.js#L328](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs12.js#L328) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs7.js#L90](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/pkcs7.js#L90) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/rsa.js#L1167](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/rsa.js#L1167) - [https://github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/x509.js#L667](https://redirect.github.com/digitalbazaar/forge/blob/2bb97afb5058285ef09bcf1d04d6bd6b87cffd58/lib/x509.js#L667) - [https://kb.cert.org/vuls/id/521113](https://kb.cert.org/vuls/id/521113) - [https://www.kb.cert.org/vuls/id/521113](https://www.kb.cert.org/vuls/id/521113) - [https://www.npmjs.com/package/node-forge](https://www.npmjs.com/package/node-forge) - [https://github.com/advisories/GHSA-5gfm-wpxj-wjgq](https://redirect.github.com/advisories/GHSA-5gfm-wpxj-wjgq) This data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-5gfm-wpxj-wjgq) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).

--- ### node-forge is vulnerable to ASN.1 OID Integer Truncation [CVE-2025-66030](https://nvd.nist.gov/vuln/detail/CVE-2025-66030) / [GHSA-65ch-62r8-g69g](https://redirect.github.com/advisories/GHSA-65ch-62r8-g69g)

More information

#### Details ##### Summary **MITRE-Formatted CVE Description** An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. ##### Description An ASN.1 OID Integer Truncation vulnerability exists in the node-forge `asn1.derToOid` function within `forge/lib/asn1.js`. OID components are decoded using JavaScript's bitwise left-shift operator (`<<`), which forcibly casts values to 32-bit signed integers. Consequently, if an attacker provides a mathematically unique, very large OID arc integer exceeding $2^{31}-1$, the value silently overflows and wraps around rather than throwing an error. ##### Impact This vulnerability allows a specially crafted ASN.1 object to spoof an OID, where a malicious certificate with a massive, invalid OID is misinterpreted by the library as a trusted, standard OID, potentially bypassing security controls. This vulnerability impacts the `asn1.derToOid` function in `node-forge` before patched version `1.3.2`. Any downstream application using this component is impacted. This component may be leveraged by downstream applications in ways that enables partial compromise of integrity, leading to potential availability and confidentiality compromises. #### Severity - CVSS Score: 6.3 / 10 (Medium) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N` #### References - [https://github.com/digitalbazaar/forge/security/advisories/GHSA-65ch-62r8-g69g](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-65ch-62r8-g69g) - [https://github.com/digitalbazaar/forge/commit/3e0c35ace169cfca529a3e547a7848dc7bf57fdb](https://redirect.github.com/digitalbazaar/forge/commit/3e0c35ace169cfca529a3e547a7848dc7bf57fdb) - [https://nvd.nist.gov/vuln/detail/CVE-2025-66030](https://nvd.nist.gov/vuln/detail/CVE-2025-66030) - [https://github.com/advisories/GHSA-65ch-62r8-g69g](https://redirect.github.com/advisories/GHSA-65ch-62r8-g69g) This data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-65ch-62r8-g69g) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).

--- ### node-forge has ASN.1 Unbounded Recursion [CVE-2025-66031](https://nvd.nist.gov/vuln/detail/CVE-2025-66031) / [GHSA-554w-wpv2-vw27](https://redirect.github.com/advisories/GHSA-554w-wpv2-vw27)

More information

#### Details ##### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. ##### Details An ASN.1 Denial of Service (Dos) vulnerability exists in the node-forge `asn1.fromDer` function within `forge/lib/asn1.js`. The ASN.1 DER parser implementation (`_fromDer`) recurses for every constructed ASN.1 value (SEQUENCE, SET, etc.) and lacks a guard limiting recursion depth. An attacker can craft a small DER blob containing a very large nesting depth of constructed TLVs which causes the Node.js V8 engine to exhaust its call stack and throw `RangeError: Maximum call stack size exceeded`, crashing or incapacitating the process handling the parse. This is a remote, low-cost Denial-of-Service against applications that parse untrusted ASN.1 objects. ##### Impact This vulnerability enables an unauthenticated attacker to reliably crash a server or client using node-forge for TLS connections or certificate parsing. This vulnerability impacts the ans1.fromDer function in `node-forge` before patched version `1.3.2`. Any downstream application using this component is impacted. These components may be leveraged by downstream applications in ways that enable full compromise of availability. #### Severity - CVSS Score: 8.7 / 10 (High) - Vector String: `CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N` #### References - [https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27) - [https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451](https://redirect.github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451) - [https://github.com/advisories/GHSA-554w-wpv2-vw27](https://redirect.github.com/advisories/GHSA-554w-wpv2-vw27) This data is provided by the [GitHub Advisory Database](https://redirect.github.com/advisories/GHSA-554w-wpv2-vw27) ([CC-BY 4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).

--- ### Release Notes

digitalbazaar/forge (node-forge)

### [`v1.3.2`](https://redirect.github.com/digitalbazaar/forge/blob/HEAD/CHANGELOG.md#132---2025-11-25) [Compare Source](https://redirect.github.com/digitalbazaar/forge/compare/v1.3.1...v1.3.2) ##### Security - **HIGH**: ASN.1 Validator Desynchronization - An Interpretation Conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions. - Reported by Hunter Wodzenski. - CVE ID: [CVE-2025-12816](https://www.cve.org/CVERecord?id=CVE-2025-12816) - GHSA ID: [GHSA-5gfm-wpxj-wjgq](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq) - **HIGH**: ASN.1 Unbounded Recursion - An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. - Reported by Hunter Wodzenski. - CVE ID: [CVE-2025-66031](https://www.cve.org/CVERecord?id=CVE-2025-66031) - GHSA ID: [GHSA-554w-wpv2-vw27](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27) - **MODERATE**: ASN.1 OID Integer Truncation - An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft ASN.1 structures containing OIDs with oversized arcs. These arcs may be decoded as smaller, trusted OIDs due to 32-bit bitwise truncation, enabling the bypass of downstream OID-based security decisions. - Reported by Hunter Wodzenski. - CVE ID: [CVE-2025-66030](https://www.cve.org/CVERecord?id=CVE-2025-66030) - GHSA ID: [GHSA-65ch-62r8-g69g](https://redirect.github.com/digitalbazaar/forge/security/advisories/GHSA-65ch-62r8-g69g) ##### Fixed - \[asn1] Fix for vulnerability identified by CVE-2025-12816 [PKCS#12](https://redirect.github.com/PKCS/forge/issues/12) MAC verification bypass due to missing macData enforcement and improper asn1.validate routine. - \[asn1] Add `fromDer()` max recursion depth check. - Add a `asn1.maxDepth` global configurable maximum depth of 256. - Add a `asn1.fromDer()` per-call `maxDepth` option. - **NOTE**: The default maximum is assumed to be higher than needed for valid data. If this assumption is false then this could be a breaking change. Please file an issue if there are use cases that need a higher maximum. - **NOTE**: The per-call `maxDepth` parameter has not been exposed up through all of the API stack due to the complexities involved. Please file an issue if there are use cases that require this instead of changing the default maximum. - \[asn1] Improve OID handling. - Error on parsed OID values larger than `2**32 - 1`. - Error on DER OID values larger than `2**53 - 1 `.

--- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/TanStack/router).