Cpe:2.3:a:digital_bazaar:node_forge:*:*:*:*:*:*:*:*

Prior to version 1.4.1, node-forge incorrectly parses deprecated certificate extensions, potentially allowing a certificate to be accepted as a CA and enabling impersonation.