tocsin

Debian/node-node-forge: high 7.5

Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not check for tailing ga

Action: Upgrade node-node-forge to 0.10.0~dfsg-3+deb11u1 or later.

Affected

introducedfixedlast affected
00.10.0~dfsg-3+deb11u1-

Fixed versions

0.10.0~dfsg-3+deb11u1

Sources

published · modified · JSON