Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-rmdy-g122-rkba
Vulnerability ID VCID-rmdy-g122-rkba
Aliases CVE-2025-66031
GHSA-554w-wpv2-vw27
Summary Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. An Uncontrolled Recursion vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to craft deep ASN.1 structures that trigger unbounded recursive parsing. This leads to a Denial-of-Service (DoS) via stack exhaustion when parsing untrusted DER inputs. This issue has been patched in version 1.3.2.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-674 Uncontrolled Recursion
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3 5.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66031.json
epss 0.00056 https://api.first.org/data/v1/epss?cve=CVE-2025-66031
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-554w-wpv2-vw27
cvssv4 8.7 https://github.com/digitalbazaar/forge
generic_textual HIGH https://github.com/digitalbazaar/forge
cvssv4 8.7 https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
generic_textual HIGH https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
ssvc Track https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
cvssv3.1_qr HIGH https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
cvssv4 8.7 https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
generic_textual HIGH https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
ssvc Track https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66031.json
https://api.first.org/data/v1/epss?cve=CVE-2025-66031
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66031
2417397 https://bugzilla.redhat.com/show_bug.cgi?id=2417397
260425c6167a38aae038697132483b5517b26451 https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
CVE-2025-66031 https://nvd.nist.gov/vuln/detail/CVE-2025-66031
GHSA-554w-wpv2-vw27 https://github.com/advisories/GHSA-554w-wpv2-vw27
GHSA-554w-wpv2-vw27 https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
RHSA-2025:22861 https://access.redhat.com/errata/RHSA-2025:22861
RHSA-2025:22936 https://access.redhat.com/errata/RHSA-2025:22936
RHSA-2025:22937 https://access.redhat.com/errata/RHSA-2025:22937
RHSA-2025:22938 https://access.redhat.com/errata/RHSA-2025:22938
RHSA-2025:22941 https://access.redhat.com/errata/RHSA-2025:22941
RHSA-2026:0261 https://access.redhat.com/errata/RHSA-2026:0261
RHSA-2026:0414 https://access.redhat.com/errata/RHSA-2026:0414
RHSA-2026:0518 https://access.redhat.com/errata/RHSA-2026:0518
RHSA-2026:1248 https://access.redhat.com/errata/RHSA-2026:1248
RHSA-2026:1517 https://access.redhat.com/errata/RHSA-2026:1517
RHSA-2026:1596 https://access.redhat.com/errata/RHSA-2026:1596
RHSA-2026:1730 https://access.redhat.com/errata/RHSA-2026:1730
RHSA-2026:19712 https://access.redhat.com/errata/RHSA-2026:19712
RHSA-2026:20041 https://access.redhat.com/errata/RHSA-2026:20041
RHSA-2026:2350 https://access.redhat.com/errata/RHSA-2026:2350
RHSA-2026:2456 https://access.redhat.com/errata/RHSA-2026:2456
RHSA-2026:2568 https://access.redhat.com/errata/RHSA-2026:2568
RHSA-2026:2737 https://access.redhat.com/errata/RHSA-2026:2737
RHSA-2026:2754 https://access.redhat.com/errata/RHSA-2026:2754
RHSA-2026:2762 https://access.redhat.com/errata/RHSA-2026:2762
RHSA-2026:2900 https://access.redhat.com/errata/RHSA-2026:2900
RHSA-2026:3710 https://access.redhat.com/errata/RHSA-2026:3710
RHSA-2026:3712 https://access.redhat.com/errata/RHSA-2026:3712
RHSA-2026:3713 https://access.redhat.com/errata/RHSA-2026:3713
RHSA-2026:3874 https://access.redhat.com/errata/RHSA-2026:3874
RHSA-2026:5807 https://access.redhat.com/errata/RHSA-2026:5807
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-66031.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/digitalbazaar/forge
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-28T18:26:11Z/ Found at https://github.com/digitalbazaar/forge/commit/260425c6167a38aae038697132483b5517b26451
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N Found at https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-11-28T18:26:11Z/ Found at https://github.com/digitalbazaar/forge/security/advisories/GHSA-554w-wpv2-vw27
Exploit Prediction Scoring System (EPSS)
Percentile 0.1795
EPSS Score 0.00056
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:59:44.166300+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2025/66xxx/CVE-2025-66031.json 38.6.0