USY-2026-0110 · Improper certificate validation · score 9.3

Signature verification accepts malformed digest info

Trailing bytes after the digest in a PKCS#1 v1.5 structure are ignored, so a forged signature verifies against a legitimate key.

SyntheticThis advisory is invented for the demonstration. node-forge is a real package; nothing described here has been reported against it.

Affected package

node-forge

Affected releases

4 from 1.0.0

Fixed in

1.3.1

Published

30 Jan 2026

Blast radius

8 of 12 · nearest 2

Docs SiteMarketing2 hops

Application
Docs Site
Hop 1declared · ^3.0.0
zod3.0.0
Faulttransitive · 1.0.4
node-forge1.0.4
Affected. Fixed in 1.3.1.

Mobile BFFMobile2 hops · 2 affected releases

Not reached · 4Checkout Service, Data Exporter, Fraud Scoring, Reporting Pipeline

Where to cut

zod carries 4 of 8

Drop the application at one end and the flawed release at the other, and count what is left in the middle. zod sits on 4 of the 8 shortest paths, which makes it the cheapest single place to break the chain.

zod 3.0.0on 4 of 8 paths

Admin Console · Docs Site · Ledger API · Storefront Web

cheerio 3.5.2on 2 of 8 paths

Inventory Sync · Mobile BFF

playwright 6.3.0on 2 of 8 paths

Admin Console · Ledger API

@prisma/client 4.5.6on 1 of 8 paths

Notification Relay

eslint 1.4.3on 1 of 8 paths

Inventory Sync

graphql 4.6.3

Affected releases

1.0.77 Apr 2025

1.0.424 Nov 2024

1.0.35 Mar 2024

1.0.04 Jun 2023

Package role

Cryptographic primitives2.4M downloads/wk

Who can publish it

1 account

Paloma Eriksenpaloma-eriksen2FA on

One account can publish this package. Whoever holds it can reach everything downstream of it, with or without an advisory.