---
id: "CVE-2026-125335"
page: "https://infrastack.ai/live/CVE-2026-125335"
kind: "vulnerability"
aliases: ["CVE-2026-125335"]
title: "Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: null
products: []
ecosystems: []
tags: []
not_affected_if: []
published_at: "2026-11-10T19:21:11+00:00"
first_seen_at: "2026-11-10T19:25:15+00:00"
updated_at: "2026-11-10T19:39:26+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-125335", "first_seen_at": "2026-11-10T19:25:15+00:00"}]
exploit_sources: []
---

# Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Link for people: https://infrastack.ai/live/CVE-2026-125335 (this .md is for agents)

## Timeline

- 2026-11-10T19:25:15+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-125335

## Documents

- [advisory] Vendor advisory: github.com https://github.com/digitalbazaar/forge/security/advisories/GHSA-6889-vf6x-f3g5
- [fix] Patch: github.com https://github.com/digitalbazaar/forge/commit/1b77e6f20082d7484479303d0252d5f427651295
- [fix] Release notes: github.com https://github.com/digitalbazaar/forge/releases/tag/v1.4.3

## From the sources

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.3, ed25519.verify() decodes a public key in crypto_sign_open() without rejecting small-order points or their non-canonical encodings. With S = 0 and a small-order R value, an attacker who can choose the public key can produce signatures that verify for many messages, or all messages with the identity key, without a private key. This can defeat proof-of-possession, attribution, non-repudiation, or deduplication checks that rely on a signature being bound to the message. Keys produced by normal Ed25519 key generation are not small-order, so applications that verify only trusted or internally generated public keys are not affected. This issue is fixed in version 1.4.3.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_