CVE-2025-12816

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 25, 2025

Last Seen

November 26, 2025

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Vulnerability in node-forge Library Allows Signature Verification Bypass36.8

A high-severity vulnerability (CVE-2025-12816) was identified in the node-forge JavaScript cryptography library, enabling attackers to bypass signature verifications by manipulating ASN.1 data structures. Users of the library are advised to update to the patched version to mitigate the risk of explo...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Vulnerability in node-forge Library Allows Signature Verification Bypass

Nov 26·2 sources

Related Entities

Carnegie Mellon Cert-cc Palo Alto Networks Forge JavaScript Library Node-forge Npm Package Interpretation-conflict Vulnerability

CVE-2025-12816

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Vulnerability in node-forge Library Allows Signature Verification Bypass

Related Articles (2)

Popular Forge library gets fix for signature verification bypass flaw

VU#521113: Forge JavaScript library impacted by a vulnerability in signature verification.

Related Entities