Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-12816

32
FAUCET Score

CVE-2025-12816 is an interpretation-conflict vulnerability (CWE-436) in node-forge versions 1.3.1 and earlier, allowing unauthenticated attackers to craft malicious ASN.1 structures. This can desynchronize schema validations, potentially bypassing cryptographic verifications and security decisions. With a CVSS score of 8.6 (HIGH), this vulnerability is network-exploitable with low attack complexity, leading to high integrity impact without requiring user interaction. While no public exploits or Metasploit modules are currently available, it has garnered some community discussion and media coverage, indicating awareness of the flaw.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.3.1CPE matchmatch criteria
cpe:2.3:a:digitalbazaar:forge:*:*:*:*:*:node.js:*:*

CVSS Data

CVSS version used by this source: 3.1

8.6HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
4.0
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.75%
Probability of exploitation in next 30 days
EPSS Percentile
51.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0075 is in the 27th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (99)

github_advisorypatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: cbl2 reaper 3.1.1-19 on CBL Mariner 2.0Fixed in: 3.1.1-21
microsoftpatch availablevia msrc
Product: 20124-17086Fixed in: 3.1.1-21
npmpatch availablevia ghsa
Product: node-forgeFixed in: 1.3.2
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.8Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:438b4904d97ca6cd51284955f284c0b078af30859460eb1ed608e20535ccc2c8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:1324d938cf5047df9125eb4bf6a9565fc4443b62c24e34494c1f57d1f8b5bdb1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Advanced Cluster Security 4.9Fixed in: advanced-cluster-security/rhacs-main-rhel8:sha256:68ec422055d5c2bd25e891853a5871e57f2c3a175ccea404be52a84c5b470e8f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Ceph Storage 8Fixed in: rhceph/grafana-rhel9:sha256:25ba51881b0dbabd2911ec309a1aa881cfb8075605a6d50dac63751482a55d62
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Developer Hub 1.7Fixed in: rhdh/rhdh-hub-rhel9:sha256:29ada5e84c6b204cf518191a21bbd22de5cb53a61bc1812b1072ce5c28a235b2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Discovery 2Fixed in: discovery/discovery-ui-rhel9:sha256:8af6fd7c8fe38d6bfd22e42810badde0aeeae738ea28667ae29dbc0cf4266f3e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat multicluster global hub 1.4.4Fixed in: multicluster-globalhub/multicluster-globalhub-grafana-rhel9:sha256:c7cdfe50df5e73358f348f0a9b8f7b35c6a5f4298d4bb6bedae7c7b9da882108
View patch
redhatpatch availablevia redhat_api
Product: Red Hat multicluster global hub 1.5.3Fixed in: multicluster-globalhub/multicluster-globalhub-grafana-rhel9:sha256:dc828bf3a86cb0680173e896579f7bd411a0e4f0962ab0ed9903e69c65c13a26
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-dashboard-rhel9:sha256:7c4110fe722576a3e8f65c4e6ae155be27e805b43e8ac8ca7ef82f3990a99874
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-mod-arch-model-registry-rhel9:sha256:a17ebde45f294859d21882537c89af095a5893716f965f4866ac2acb307bc4a8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:sha256:d17199ec02f3f62ed061a5d51d8a9f7497dcade091a7b3c01ad14a781f6e97df
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:sha256:d017ace8b157f711e269dd0a1f073235eaa9f4c58a7ff8fc974ae3d05efb80a6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:sha256:0780f52efa6c68ea2fb6371edfbd8b703157c38911803985bb1a676c84e073b5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:sha256:a202c9ec6be34c4be1793e4f9f348077f345c450e0fcd04071d5092f266df9b4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:sha256:e18d2d006c8cd4e3d3816540e154f421e7550a96f73901a799c15a5b4fe576db
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:sha256:6e8f2fc28114e00d6f46450f111916b5b4efbdc1cee78596d36cd24baaea0c1c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:sha256:3bdeae6f78230e1d966cf7a3f35ea821c808f40cc4c2abb7af9b1748f5611826
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:sha256:012089e186f66a139d3dbab861f2c88e18c7953b81381872fb5ccf78465ab641
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:sha256:62a04dfef095c14dcf8ae37af42f49ad410d0525eb47c509d53c0469cdf09b8c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:sha256:267b5f0d8edc1ffa3cb8f069fd83483712c17de02d0d8568cd9bda0b2389ebf0
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:sha256:47ebda63b857cae1475cb195d372db7a7a4ee729d286e1da386bdf5972d81482
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:sha256:158c783d59cdbdb9028c4dd760632edd7295330b5dcebbe0017bff4089635c3a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:sha256:fbe346eafcfbb867f595cbad5ea0190fabbabc61ad80a4be2265e0e2b0149f68
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:sha256:fec8bf2d539fd00df8854a723bae98b7e173c43153c3132ba459bc0e9a86ae35
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:sha256:b19482e4008ac03a39b432fb3056bb1ab372ef1617df5bbfe784bc2910b6827a
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:sha256:bcb20d34a700e232c713123cc3b55ab538261d4f185f5ec532ba8c432a91676c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:sha256:85abac79e8d09b61a9fffb0b5d3fd2a3f9da65bad9573a72cecb878a81357dcf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:sha256:dc4a277cebbdc373534b73a432085d3a4b502e3c189fe75da8f0441ff9d3ce2c
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-dashboard-rhel9:sha256:ce1e29736422aa55f1a3837fc38a365fbc1096d58b6794cca84ff907da273917
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift AI 2.25Fixed in: rhoai/odh-mod-arch-model-registry-rhel9:sha256:331f8435e1bd3dec98947a24346873d09056e37e2d7ed83a463098dbf9f31a47
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Dev Spaces (RHOSDS) 3.26Fixed in: devspaces/code-rhel9:sha256:60a1c1cf2a755e24203ae76e37c3e1c08f97ae8a1905df3538b31f7d9b543f0f
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-ossmc-rhel8:sha256:ab2b4a1a2d1e5230e3c092af3827a21c0838702ae227afd786925d1704002afd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.6Fixed in: openshift-service-mesh/kiali-rhel8:sha256:29e6ecab0c0f10c17b752d30978dbda4892b3cf471344faa182ac0b86ee76928
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:e00f3b28e62c2ac90d836d7673183b1b391b76ce1b272861e49571f345cfa6a4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3Fixed in: openshift-service-mesh/kiali-rhel9:sha256:9ab887b31e9d45ef89acd26b0d2bd9aeb5fc7c87d0f296d605ed9fa5d8c6a50e
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:928ed23934eae4e9c16ac23eaa828cc09f2d0ae539f330454ad6222e8cec3250
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.1Fixed in: openshift-service-mesh/kiali-rhel9:sha256:00743a84647ebaac732100a5e224ec024d3dfa22a9a942b4df81d1042eac2493
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-ossmc-rhel9:sha256:94c2091f1a4fad7ec534e36a2ae0f791e1519cc8f74b294c75fa70745503c619
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 3.2Fixed in: openshift-service-mesh/kiali-rhel9:sha256:078340c685503fbb211a66d8016d795a647881e735f5d9f9e89a39e64f21b5cd
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.12Fixed in: quay/quay-rhel8:sha256:03a485b1c02f5155f22c7820c166889b3f7d7b479892bb4d106432fa2dbf217b
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.15Fixed in: quay/quay-rhel8:sha256:a8daa359ab7a0bc9722b25fb87aa6fd253506632640bfe7f31c9c92868421ecb
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.16Fixed in: quay/quay-rhel9:sha256:a1fccdf3e171f8c2410e0fb3182e49188eec90f2acc08174634114455853436d
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.9Fixed in: quay/quay-rhel8:sha256:8add5a3b448723ff62e1ede9749cc970516a6af55045bd63ede8062b11fe4faf
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Quay 3.1Fixed in: quay/quay-rhel8:sha256:5cf58b1f54219b67c725f4a5066d9e757e7b5ece39d5de1a474a8be6a3490401
View patch
redhatpatch availablevia redhat_api
Product: Migration Toolkit for Virtualization 2.9Fixed in: migration-toolkit-virtualization/mtv-console-plugin-rhel9:sha256:5d385ba67a8d8158790da4511586c190a24a194e2ccb10fcb7182b658a59c624
View patch
redhatpatch availablevia redhat_api
Product: Network Observability (NETOBSERV) 1.11.0Fixed in: network-observability/network-observability-console-plugin-compat-rhel9:sha256:17be6b67f5ed6757b65df0d59dc5d59130ee2e3510c60453de77fadfd7ca3c16
View patch
redhatpatch availablevia redhat_api
Product: Network Observability (NETOBSERV) 1.11.0Fixed in: network-observability/network-observability-console-plugin-rhel9:sha256:bb0f0e05c7bb037cd07c260a8fcea50fb62cc433d8cd504c4bb065f994c359c6
View patch
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/bootc-cuda-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-console-plugin-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel8
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/acm-grafana-rhel9
redhatno patchvia redhat_api
Product: Red Hat build of Apache Camel - HawtIO 4Fixed in: io.hawt-project
redhatno patchvia redhat_api
Product: Red Hat build of Apicurio Registry 2Fixed in: io.apicurio-apicurio-registry
redhatno patchvia redhat_api
Product: Red Hat Connectivity Link 1Fixed in: rhcl-1/rhcl-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Data Grid 8Fixed in: org.infinispan-infinispan-console
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-ocp-rhel9
redhatno patchvia redhat_api
Product: Red Hat Edge Manager previewFixed in: rhem/flightctl-ui-rhel9
redhatno patchvia redhat_api
Product: Red Hat Enterprise Linux AI (RHEL AI) 3Fixed in: rhelai3/disk-image-cuda-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-dashboard-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift AI (RHOAI)Fixed in: rhoai/odh-mod-arch-gen-ai-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/nmstate-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-networking-console-plugin-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/ocs-client-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-multicluster-console-rhel9
redhatno patchvia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/console-plugin-rhel8
redhatno patchvia redhat_api
Product: Migration Toolkit for ContainersFixed in: rhmtc/openshift-migration-ui-rhel8
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
redhatno patchvia redhat_api
Product: OpenShift LightspeedFixed in: openshift-lightspeed/lightspeed-console-plugin-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-rhel9-operator
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/kibana6-rhel8
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-curator5-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/logging-view-plugin-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-proxy-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch6-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/dex-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-console-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-api-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-monitoring-plugin-rhel9
redhatend of lifevia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines/pipelines-hub-db-migration-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/gitops-rhel8-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/must-gather-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Trusted Profile AnalyzerFixed in: rhtpa/rhtpa-trustification-service-rhel9
redhatend of lifevia redhat_api
Product: Logging Subsystem for Red Hat OpenShiftFixed in: openshift-logging/elasticsearch-operator-bundle
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces-tech-preview/idea-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-extensions-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argocd-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift GitOpsFixed in: openshift-gitops-1/argo-rollouts-rhel8

Vendor Advisories (3)

npmGHSA-5gfm-wpxj-wjgqhigh

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Nov 26, 2025
redhatCVE-2025-12816Important

node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications

Nov 25, 2025
microsoft2025-Nov/CVE-2025-12816Important

CVE-2025-12816

Nov 11, 2025

References

kb.cert.org / vuls/id/521113
Third Party Advisory
github.com / digitalbazaar/forge
Product
github.com / digitalbazaar/forge/pull/1124
Issue TrackingPatch
github.com / digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq
ExploitVendor Advisory
kb.cert.org / vuls/id/521113
Third Party Advisory
npmjs.com / package/node-forge
Product