Debian/node-node-forge: medium 5.3
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS#1 v1.5 signature verification code does not properly check `Dige
Action: Upgrade node-node-forge to 0.10.0~dfsg-3+deb11u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.10.0~dfsg-3+deb11u1 | - |
Fixed versions
| 0.10.0~dfsg-3+deb11u1 |
Sources
published · modified · JSON