Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,974All CVEsplus 19,118 rejected
- 407Last 24 hours2,833 in the last 7 days
- 16,804Last 30 days1,544 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 11 | 4 | 5 | 0 | 20 | 27 |
| 2025 | 0 | 1 | 1 | 0 | 0 | 2 | 7 |
| 2024 | 0 | 0 | 1 | 0 | 0 | 1 | 5 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 4 |
| 2022 | 0 | 2 | 2 | 0 | 0 | 4 | 4 |
| Title | ||
|---|---|---|
| CVE-2026-119191 | Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDerdigitalbazaar · forge | High7.5 |
| CVE-2026-119190 | Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13digitalbazaar · forge | High7.4 |
| CVE-2026-119189 | Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsagedigitalbazaar · forge | Medium5.9 |
| CVE-2026-119188 | Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake messagedigitalbazaar · forge | High7.5 |
| CVE-2026-119187 | Forge: Denial of service in TLS record processing via call stack exhaustiondigitalbazaar · forge | High7.5 |
| CVE-2026-119186 | Forge: AES-GCM authentication bypass via unvalidated tagLength optiondigitalbazaar · forge | Medium5.9 |
| CVE-2026-118782 | Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countdigitalbazaar · forge | High7.5 |
| CVE-2026-118781 | Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)digitalbazaar · forge | Low2.9 |
| CVE-2026-118780 | Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA storedigitalbazaar · forge | Low3.7 |
| CVE-2026-118779 | Forge: Regular expression denial of service in PEM decoding (pem.decode)digitalbazaar · forge | High7.5 |
| CVE-2026-118778 | Forge: TLS client crash when the server sends no certificatedigitalbazaar · forge | Medium5.9 |
| CVE-2026-118777 | Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookiedigitalbazaar · forge | Medium4.8 |
| CVE-2026-118776 | Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryptiondigitalbazaar · forge | Low3.7 |
| CVE-2026-118775 | Forge: ASN.1 OID first arc truncation in asn1.oidToDerdigitalbazaar · forge | Low3.7 |
| CVE-2026-118774 | Forge: Certificate signature verified with the issuer's RSA signature schemedigitalbazaar · forge | Low3.7 |
| CVE-2026-85393 | node-forge through 1.4.0 RSA PKCS#1 v1.5 Signature Forgery via Nested DigestAlgorithm Paddingdigitalbazaar · forge | High8.7 |
| CVE-2026-33896 | Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)digitalbazaar · forge | High7.4 |
| CVE-2026-33895 | Forge has signature forgery in Ed25519 due to missing S > L checkdigitalbazaar · forge | High7.5 |
| CVE-2026-33894 | Forge has signature forgery in RSA-PKCS due to ASN.1 extra fielddigitalbazaar · forge | High7.5 |
| CVE-2026-33891 | Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Inputdigitalbazaar · forge | High7.5 |
| CVE-2025-66030 | node-forge ASN.1 OID Integer Truncationdigitalbazaar · forge | Medium6.3 |
| CVE-2025-66031 | node-forge ASN.1 Unbounded Recursiondigitalbazaar · forge | High8.7 |
| CVE-2024-31995 | zcap has incomplete expiration checks in capability chains.digitalbazaar · zcap | Medium4.3 |
| CVE-2022-24772 | Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar · forge | High7.5 |
| CVE-2022-24773 | Improper Verification of Cryptographic Signature in `node-forge`digitalbazaar · forge | Medium5.3 |
| CVE-2022-24771 | Improper Verification of Cryptographic Signature in node-forgedigitalbazaar · forge | High7.5 |
| CVE-2022-0122 | Open Redirect in digitalbazaar/forgedigitalbazaar · digitalbazaar/forge | Medium5.3 |