{"id":"CVE-2026-33895","title":"Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript","summary":"Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signature verification accepts forged non-canonical signatures where the scalar S is not reduced modul…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-347"],"vendor":"digitalbazaar","product":"forge","affected":["forge <= 1.3.3"],"published":"2026-03-27","updated":"2026-07-02","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-33895","references":[{"url":"https://datatracker.ietf.org/doc/html/rfc8032#section-8.4","label":"security-advisories@github.com"},{"url":"https://github.com/digitalbazaar/forge/commit/bdecf11571c9f1a487cc0fe72fe78ff6dfa96b85","label":"security-advisories@github.com"},{"url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw","label":"security-advisories@github.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:13826","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:24761","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:34342","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/errata/RHSA-2026:9742","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://access.redhat.com/security/cve/CVE-2026-33895","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2452457","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://github.com/digitalbazaar/forge/security/advisories/GHSA-q67f-28xg-22rw","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33895.json","label":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-33895"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33895"},{"url":"https://access.redhat.com/errata/RHSA-2026:86618"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00527,"epssPercentile":0.44406,"ingestedAt":"2026-07-02T12:34:40.395Z","patched":["ansible_automation_platform_2_5_for_rhel 8","ansible_automation_platform_2_5_for_rhel 9","cluster_observability_operator 1.5.3","developer_hub 1.8","developer_hub 1.9"],"slug":"CVE-2026-33895","body":"## Overview\n\nForge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.4.0, Ed25519 signature verification accepts forged non-canonical signatures where the scalar S is not reduced modulo the group order (`S >= L`). A valid signature and its `S + L` variant both verify in forge, while Node.js `crypto.verify` (OpenSSL-backed) rejects the `S + L` variant, as defined by the specification. This class of signature malleability has been exploited in practice to bypass authentication and authorization logic (see CVE-2026-25793, CVE-2022-35961). Applications relying on signature uniqueness (i.e., dedup by signature bytes, replay tracking, signed-object canonicalization checks) may be bypassed. Version 1.4.0 patches the issue.\n\n## Affected\n\n- `forge <= 1.3.3`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:24761** · Red Hat · fixed in: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9 · released 2026-06-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:24761)\n- **RHSA-2026:34342** · Red Hat · fixed in: Cluster Observability Operator 1.5.3 · released 2026-07-01 · [advisory](https://access.redhat.com/errata/RHSA-2026:34342)\n- **RHSA-2026:9742** · Red Hat · fixed in: Red Hat Developer Hub 1.8 · released 2026-04-22 · [advisory](https://access.redhat.com/errata/RHSA-2026:9742)\n- **RHSA-2026:13826** · Red Hat · fixed in: Red Hat Developer Hub 1.9 · released 2026-05-05 · [advisory](https://access.redhat.com/errata/RHSA-2026:13826)\n- **Red Hat VEX** · Important · affected: Logging Subsystem for Red Hat OpenShift, Red Hat build of Apicurio Registry 2, Red Hat Build of Podman Desktop, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat Quay 3 · no fix planned: Logging Subsystem for Red Hat OpenShift, Red Hat Fuse 7, Red Hat build of Apicurio Registry 2, Red Hat Build of Podman Desktop, … · updated 2026-10-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33895.json)\n- **RHSA-2026:86618** · Red Hat · fixed in: Red Hat Ceph Storage 9.2 · released 2026-10-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:86618)","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}