Security releases

Researcher credits in vendor advisories

Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.

Vendor

These 15 releases credit 0 lines. 0 are still open to claim.

One mark per credit line Open Claimed

Digitalbazaar CVE-2026-119191

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromD

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-119190

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge parsed deprecated extension OIDs

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-119189

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge enforced an X.509 CA certificate

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-119188

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-119187

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-119186

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tag

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118782

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS#12 MAC or PKCS#1

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118781

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118780

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pki.verify

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118779

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118778

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118777

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names a

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118776

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used decipher.f

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118775

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, asn1.oidToDer() in lib/asn1.js did not rang

0 CVEs and 0 credit lines.
Digitalbazaar CVE-2026-118774

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used certificat

0 CVEs and 0 credit lines.