Tag
Forge Ed25519 Signature Forgery Vulnerability
2 rules 1 TTP 3 CVEsForge is vulnerable to signature forgery in Ed25519 due to a missing check that S < L, allowing non-canonical signatures and potentially bypassing authentication/authorization logic, affecting versions before 1.4.0.
Forge Ed25519 Signature Forgery Vulnerability
2 rules 1 TTP 3 CVEsForge is vulnerable to signature forgery in Ed25519 due to a missing check that S < L, allowing non-canonical signatures and potentially bypassing authentication/authorization logic, affecting versions before 1.4.0.
Forge RSA Signature Forgery Vulnerability
2 rules 1 TTP 2 CVEsForge is vulnerable to signature forgery in RSA-PKCS due to ASN.1 extra field, allowing attackers to forge signatures by stuffing garbage bytes within the ASN structure for low public exponent keys (e=3), enabling Bleichenbacher style forgery and affecting npm/node-forge versions less than 1.4.0.
jsrsasign DSA Signature Forgery Vulnerability (CVE-2026-4600)
2 rules 1 TTPThe jsrsasign package before version 11.1.1 is vulnerable to cryptographic signature forgery (CVE-2026-4600) due to improper DSA domain-parameter validation, allowing attackers to forge DSA signatures or X.509 certificates, potentially leading to unauthorized access or code execution.