> CVE-2025-12816

« BACK_TO_HOME
PUBLISHED
2025-11-25 20:15
MODIFIED
2025-11-25 20:15
EPSS (Prob. Exploit)
0.74%
Top 45.8%
DATA SOURCES:
NVD 🔗 2025-11-25 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-03-01 MSRC 🔗 2026-10-01

> DESCRIPTION

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: Red Hat Developer Hub 1.7.4 release.
Red Hat Developer Hub 1.7.4 has been released.
Red Hat Security Advisory: Red Hat Quay 3.16.1
Red Hat Quay 3.16.1 is now available with bug fixes.
Red Hat Security Advisory: MTV RHEL9 Images
Updated Release packages that fix several bugs and add various enhancements are now available.
Red Hat Security Advisory: RHACS 4.8.8 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security (RHACS), which typically include new features, bug fixes, and/or security patches.
Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security (RHACS), which typically include new features, bug fixes, and/or security patches.
Red Hat Security Advisory: RHACS 4.9.3 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security (RHACS), which typically include new features, bug fixes, and/or security patches.
Red Hat Security Advisory: Red Hat multicluster global hub 1.4.4 security update
Red Hat multicluster global hub v1.4.4 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as ha...
Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.26.0 Release.
Red Hat OpenShift Dev Spaces 3.26.0 has been released.
Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: Red Hat multicluster global hub 1.5.3 security update
Red Hat multicluster global hub v1.5.3 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as ha...
Red Hat Security Advisory: Red Hat Quay 3.10.18
Red Hat Quay 3.10.18 is now available with bug fixes.
Red Hat Security Advisory: Red Hat Quay 3.9.18
Red Hat Quay 3.9.18 is now available with bug fixes.
Red Hat Security Advisory: Red Hat Ceph Storage
A new version of Red Hat build of Ceph Storage has been released
Red Hat Security Advisory: Network Observability 1.11.0 for OpenShift
Network Observability 1.11 for Red Hat OpenShift.
Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.3
The 1.15.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Red Hat Security Advisory: RHOAI 3.3 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.15.4
The 1.15.4 GA release of Red Hat OpenShift Pipelines Operator.. For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.18.4 security update
Important: Red Hat OpenShift GitOps v1.18.4 security update
Red Hat Security Advisory: Red Hat OpenShift GitOps v1.17.5 security update
Important: Red Hat OpenShift GitOps v1.17.5 security update
Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.20.3
The 1.20.3 GA release of Red Hat OpenShift Pipelines Operator.. For more details see [product documentation](https://docs.redhat.com/en/documentation/red_hat_openshift_pipelines).
Red Hat Security Advisory: Red Hat Quay 3.14.6
Red Hat Quay 3.14.6 is now available with bug fixes.
Red Hat Security Advisory: Red Hat Quay 3.13.11
Red Hat Quay 3.13.11 is now available with bug fixes.
Red Hat Security Advisory: RHOAI 2.16.4 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: RHOAI 3.3.3 - Red Hat OpenShift AI
Updated images are now available for Red Hat OpenShift AI.
Red Hat Security Advisory: OpenShift Container Platform 4.19.32 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.32 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red...
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.19.20 security, enhancement & bug fix update
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Red Hat Security Advisory: Red Hat Migration Toolkit for Containers
A new version of Migration Toolkit for Containers (MTC) is now available.
Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.17.28 security, enhancement & bug fix update
Red Hat Security Advisory: New container image: rhceph-9.2
A new version of Red Hat build of Ceph Storage has been released

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
129 versions affected
ALIASES:
GHSA-5gfm-wpxj-wjgq

> HISTORIQUE DES MODIFICATIONS

Première apparition
25/11/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:37
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 9 months ago

> REFERENCES

https://github.com/digitalbazaar/forge
https://github.com/digitalbazaar/forge/pull/1124
https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq
https://kb.cert.org/vuls/id/521113
https://www.npmjs.com/package/node-forge
« BACK_TO_HOME