CVE-2026-125335: Forge: Ed25519 signature verification accepts small-order public keys
ed25519.verify() does not reject public keys of small order, such as the identity point. Under such a key, a signature with S = 0 and a small-order R verifies for many messages, or for every message with the identity key, without any private key. Fixed in node-forge 1.4.3.
References
- github.com/advisories/GHSA-6889-vf6x-f3g5
- github.com/digitalbazaar/forge/commit/1b77e6f20082d7484479303d0252d5f427651295
- github.com/digitalbazaar/forge/pull/1169
- github.com/digitalbazaar/forge/releases/tag/v1.4.3
- github.com/digitalbazaar/forge/security/advisories/GHSA-6889-vf6x-f3g5
- nvd.nist.gov/vuln/detail/CVE-2026-125335
Code Behaviors & Features
Detect and mitigate CVE-2026-125335 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →