{"id":"CVE-2026-125335","kind":"vulnerability","aliases":["CVE-2026-125335"],"related":[],"title":"Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript","description":"Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify() decodes a public key in crypto_sign_open() without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can choose the public key can produce signatures that verify for many messages, or all messages with the identity key, without a private key. This can defeat proof-of-possession, attribution, non-repudiation, or deduplication checks that rely on a signature being bound to the message. Keys produced by normal Ed25519 key generation are not small-order, so applications that verify only trusted or internally generated public keys are not affected. This issue is fixed in version 1.4.3.","summary":null,"severity":"low","cvss":3.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":[],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-10T19:21:11+00:00","first_seen_at":"2026-11-10T19:25:15+00:00","triaged_at":null,"updated_at":"2026-11-10T19:39:26+00:00","category":null,"confidence":null,"triage":null,"analyst_status":null,"analyst_note":null,"search":"'-125335':19A,22A '-2026':18A,21A '0':65C '1.4.3':41C,156C 'affect':149C 'also':2A,24C 'applic':137C 'attack':74C 'attribut':107C 'bound':120C 'call':3A,25C 'canon':61C 'check':113C 'choos':77C 'crypto':48C 'cve':17A,20A 'decod':43C 'dedupl':112C 'defeat':102C 'ed25519':128C 'ed25519.verify':42C 'encod':62C 'fix':153C 'forg':1A,6A,23C,28C 'generat':130C,144C 'ident':94C 'implement':10A,32C 'intern':143C 'issu':151C 'javascript':16A,38C 'key':46C,80C,95C,99C,124C,129C,146C 'layer':13A,35C 'mani':87C 'messag':88C,91C,123C 'nativ':9A,31C 'node':5A,27C 'node-forg':4A,26C 'non':60C,109C 'non-canon':59C 'non-repudi':108C 'normal':127C 'open':50C 'order':55C,70C,135C 'point':56C 'possess':106C 'prior':39C 'privat':98C 'produc':82C,125C 'proof':104C 'proof-of-possess':103C 'public':45C,79C,145C 'r':71C 'reject':52C 'reli':115C 'repudi':110C 'secur':14A,36C 'sign':49C 'signatur':83C,118C 'small':54C,69C,134C 'small-ord':53C,68C,133C 'transport':12A,34C 'trust':141C 'valu':72C 'verifi':85C,139C 'version':155C 'without':51C,96C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":null,"audience":null,"plain_action":null,"pkeys":[],"ptokens":[],"labels":["low"],"campaign_type":null,"search_a":"'-125335':19A,22A '-2026':18A,21A 'also':2A 'call':3A 'cve':17A,20A 'forg':1A,6A 'implement':10A 'javascript':16A 'layer':13A 'nativ':9A 'node':5A 'node-forg':4A 'secur':14A 'transport':12A","search_b":"","search_c":"'0':65C '1.4.3':41C,156C 'affect':149C 'also':24C 'applic':137C 'attack':74C 'attribut':107C 'bound':120C 'call':25C 'canon':61C 'check':113C 'choos':77C 'crypto':48C 'decod':43C 'dedupl':112C 'defeat':102C 'ed25519':128C 'ed25519.verify':42C 'encod':62C 'fix':153C 'forg':23C,28C 'generat':130C,144C 'ident':94C 'implement':32C 'intern':143C 'issu':151C 'javascript':38C 'key':46C,80C,95C,99C,124C,129C,146C 'layer':35C 'mani':87C 'messag':88C,91C,123C 'nativ':31C 'node':27C 'node-forg':26C 'non':60C,109C 'non-canon':59C 'non-repudi':108C 'normal':127C 'open':50C 'order':55C,70C,135C 'point':56C 'possess':106C 'prior':39C 'privat':98C 'produc':82C,125C 'proof':104C 'proof-of-possess':103C 'public':45C,79C,145C 'r':71C 'reject':52C 'reli':115C 'repudi':110C 'secur':36C 'sign':49C 'signatur':83C,118C 'small':54C,69C,134C 'small-ord':53C,68C,133C 'transport':34C 'trust':141C 'valu':72C 'verifi':85C,139C 'version':155C 'without':51C,96C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-04T01:10:54+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-125335","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-125335","severity":null,"published_at":"2026-11-10T19:21:11+00:00","modified_at":"2026-11-10T19:21:11+00:00","first_seen_at":"2026-11-10T19:25:15+00:00","fetched_at":"2026-11-10T19:25:15+00:00","note":null}],"documents":[{"id":117505,"url":"https://github.com/digitalbazaar/forge/commit/1b77e6f20082d7484479303d0252d5f427651295","title":"Patch: github.com","kind":"other","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Patch: github.com"},{"id":117497,"url":"https://github.com/digitalbazaar/forge/releases/tag/v1.4.3","title":"Release notes: github.com","kind":"release","source":"nvd","publisher":"vendor","text":null,"published_at":null,"relation":"fix","confidence":null,"note":"Release notes: github.com"},{"id":117507,"url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-6889-vf6x-f3g5","title":"Vendor advisory: github.com","kind":"vendor","source":"nvd","publisher":"vendor","text":null,"published_at":"2026-11-04T01:10:54+00:00","relation":"advisory","confidence":null,"note":"Vendor advisory: github.com"}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}