آخرین آسیب‌پذیری‌ها

Nuxt dev server arbitrary file read through client error reports

Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

pyasn1: Quadratic-complexity denial of service in binary REAL decoding

pyasn1: Quadratic CPU consumption in constructed BIT STRING decoding

pyasn1: Quadratic-time denial of service in constructed string and indefinite-length ANY decoding

pyasn1: Quadratic CPU use in schemaless BER/CER/DER container decoding

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer

Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13

Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Forge: Denial of service in TLS record processing via call stack exhaustion

Forge: AES-GCM authentication bypass via unvalidated tagLength option

Sandbox Escape via Table Rotation in ServiceNow AI Platform

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Domain Separation Bypass in ServiceNow AI Platform

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Forge: Regular expression denial of service in PEM decoding (pem.decode)

Forge: TLS client crash when the server sends no certificate

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Cleartext Storage of OAuth Credentials in ServiceNow AI Platform

Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption

Forge: ASN.1 OID first arc truncation in asn1.oidToDer

Forge: Certificate signature verified with the issuer's RSA signature scheme