Denial of Service

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Forge: Regular expression denial of service in PEM decoding (pem.decode)CVE-2026-118779digitalbazaar · CVSS 7.5 · 0.7% likely

   CWE-1333

2. Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero InputCVE-2026-33891digitalbazaar · CVSS 7.5 · 0.6% likely

   CWE-835

3. Forge: ReDoS in forge.http response header and cookie trimmingCVE-2026-125333digitalbazaar · CVSS 5.9 · 0.6% likely

   CWE-1333

4. node-forge ASN.1 Unbounded RecursionCVE-2025-66031digitalbazaar · CVSS 8.7 · 0.4% likely

   CWE-674

5. Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerCVE-2026-119191digitalbazaar · CVSS 7.5 · 0.4% likely

   CWE-400

6. Forge: Denial of service in TLS record processing via call stack exhaustionCVE-2026-119187digitalbazaar · CVSS 7.5 · 0.4% likely

   CWE-674

7. Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)CVE-2026-118781digitalbazaar · CVSS 2.9 · 0.2% likely

   CWE-835

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.