Niedrig 3.7Linux-Server
CVE-2026-125335
node-forge: node-forge: Signature verification bypass via unvalidated small-order Ed25519 public keys
node-forge
### Summary `ed25519.verify()` does not reject public keys of small order, such as the identity point. Under such a key, a signature with `S = 0` and a small-order `R` verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3. ### Details `crypto_sign_open()` in `lib/ed25519.js` decodes the public key `A` with `unpackneg()`, which only checks that the point is on the curve, and then checks `R == [S]B - [k]A`…
10. Nov 2026
Original bei Red Hat öffnen