{"id":"CVE-2026-33894","published":"2026-03-27T20:45:49Z","modified":"2026-09-10T12:04:55Z","title":"Forge has signature forgery in RSA-PKCS due to ASN.1 extra field","vendor":"digitalbazaar","product":"forge","tier":"tail","description":{"text":"Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures by stuffing “garbage” bytes within the ASN structure in order to construct a signature that passes verification, enabling Bleichenbacher style forgery. This issue is similar to CVE-2022-24771, but adds bytes in an addition field within the ASN structure, rather than outside of it.  Additionally, forge does not validate that signatures include a minimum of 8 bytes of padding as defined by the specification, providing attackers additional space to construct Bleichenbacher forgeries. Version 1.4.0 patches the issue.","provenance":"source","from":"CVE.org"},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00481,"percentile":0.41332,"provenance":"source"},"cwes":[{"id":"CWE-347","name":"Improper Verification of Cryptographic Signature"},{"id":"CWE-20","name":"Improper Input Validation"}],"references":[{"url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp","tags":["x_refsource_CONFIRM"]},{"url":"https://datatracker.ietf.org/doc/html/rfc2313#section-8","tags":["x_refsource_MISC"]},{"url":"https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE","tags":["x_refsource_MISC"]},{"url":"https://www.rfc-editor.org/rfc/rfc8017.html","tags":["x_refsource_MISC"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-33894","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452464","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33894.json","tags":["x_sadp-csaf-vex"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24761","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:34342","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9742","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:13826","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22840","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22629","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:21017","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:24853","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19375","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:22465","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:23361","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":13.5,"factors":[{"name":"EPSS percentile","points":8.27},{"name":"CVSS severity","points":5.25}]},"vendorSlug":"digitalbazaar","affectedVersions":[{"vendor":"digitalbazaar","product":"forge","versions":["< 1.4.0"]}],"affected":[{"ecosystem":"npm","package":"node-forge","vulnerableRanges":["<1.4.0"],"patched":["1.4.0"],"from":["GHSA-ppp5-5v6c-4jwp"],"provenance":"source"}],"euvd":{"id":"EUVD-2026-16834","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-digitalbazaar-forge-cve-2022-24771","parents":[{"from":"CVE-2022-24771","to":"CVE-2026-33894","relation":"related","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This issue is similar to CVE-2022-24771, but adds bytes in an addition field within the ASN structure, rather than outside of it.","from":"CVE.org","in":"CVE-2026-33894"},{"kind":"osv-related","provenance":"source","id":"GHSA-ppp5-5v6c-4jwp","via":"reference","url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-cfm4-qjh2-4765"}]}],"children":[{"from":"CVE-2026-33894","to":"CVE-2026-85393","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"This is an incomplete fix for CVE-2026-33894.","from":"CVE.org","in":"CVE-2026-85393"},{"kind":"osv-related","provenance":"source","id":"GHSA-ppp5-5v6c-4jwp","via":"reference","url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"},{"kind":"osv-related","provenance":"source","id":"GHSA-86w9-cpqp-85rv","via":"reference","url":"https://github.com/advisories/GHSA-ppp5-5v6c-4jwp"}]}]}}