An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.
Weakness
Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B’s state.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Forge | Digitalbazaar | * | 1.3.1 (including) |
| Migration Toolkit for Virtualization 2.9 | RedHat | migration-toolkit-virtualization/mtv-console-plugin-rhel9:1769034026 | * |
| Multicluster Global Hub 1.4.5 | RedHat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1770126537 | * |
| Multicluster Global Hub 1.5.4 | RedHat | multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1770109405 | * |
| Network Observability (NETOBSERV) 1.11.2 | RedHat | network-observability/network-observability-console-plugin-compat-rhel9:1771227610 | * |
| Network Observability (NETOBSERV) 1.11.2 | RedHat | network-observability/network-observability-console-plugin-rhel9:1771227650 | * |
| Red Hat Advanced Cluster Security for Kubernetes 4.8 | RedHat | advanced-cluster-security/rhacs-main-rhel8:1769615659 | * |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 | RedHat | advanced-cluster-security/rhacs-main-rhel8:1770250889 | * |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 | RedHat | advanced-cluster-security/rhacs-main-rhel8:1770074713 | * |
| Red Hat Ceph Storage 8 | RedHat | rhceph/grafana-rhel9:1770630607 | * |
| Red Hat Developer Hub 1.7 | RedHat | rhdh/rhdh-hub-rhel9:1.7.4-1767715042 | * |
| Red Hat Discovery 2 | RedHat | discovery/discovery-ui-rhel9:1767904573 | * |
| Red Hat OpenShift AI 2.16 | RedHat | rhoai/odh-dashboard-rhel8:1774282136 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-dashboard-rhel9:1770209922 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-mod-arch-model-registry-rhel9:1770210287 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1770055428 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:1770103255 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1770053703 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1770053831 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1770053721 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1770053740 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1770053864 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1770055550 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:1770055405 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:1770055397 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:1770053733 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:1770053728 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1770053730 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1770053829 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1770053864 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1770053748 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1770053723 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1770055425 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-dashboard-rhel9:1770641923 | * |
| Red Hat OpenShift AI 2.25 | RedHat | rhoai/odh-mod-arch-model-registry-rhel9:1770642057 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-dashboard-rhel9:1779189627 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-mod-arch-gen-ai-rhel9:1778473763 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-mod-arch-model-registry-rhel9:1778666987 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1771502869 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9:1771502930 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9:1771502912 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1771502889 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1771502843 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9:1771502897 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9:1771502844 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1769162595 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9:1771502870 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9:1771511331 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9:1771502906 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9:1771502921 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9:1771502845 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1771502863 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1771502906 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9:1771502910 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9:1771502884 | * |
| Red Hat OpenShift AI 3.3 | RedHat | rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1771874181 | * |
| Red Hat OpenShift Container Platform 4.19 | RedHat | openshift4/ose-networking-console-plugin-rhel9:1779256322 | * |
| Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 | RedHat | devspaces/code-rhel9:1769804221 | * |
| Red Hat OpenShift GitOps 1.17 | RedHat | openshift-gitops-1/console-plugin-rhel8:1772195995 | * |
| Red Hat OpenShift GitOps 1.18 | RedHat | openshift-gitops-1/console-plugin-rhel8:1772438822 | * |
| Red Hat OpenShift Pipelines 1.15 | RedHat | openshift-pipelines/pipelines-console-plugin-rhel8:1772110573 | * |
| Red Hat OpenShift Pipelines 1.15 | RedHat | openshift-pipelines/pipelines-hub-ui-rhel8:1772036471 | * |
| Red Hat OpenShift Pipelines 1.15 | RedHat | openshift-pipelines/pipelines-console-plugin-rhel8:1772110573 | * |
| Red Hat OpenShift Pipelines 1.15 | RedHat | openshift-pipelines/pipelines-hub-ui-rhel8:1772036471 | * |
| Red Hat OpenShift Pipelines 1.2 | RedHat | openshift-pipelines/pipelines-console-plugin-rhel9:1770988020 | * |
| Red Hat OpenShift Service Mesh 2.6 | RedHat | openshift-service-mesh/kiali-ossmc-rhel8:1.73.25-1764836138 | * |
| Red Hat OpenShift Service Mesh 2.6 | RedHat | openshift-service-mesh/kiali-rhel8:1.73.25-1764836020 | * |
| Red Hat OpenShift Service Mesh 3.0 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:2.4.11-1764844423 | * |
| Red Hat OpenShift Service Mesh 3.0 | RedHat | openshift-service-mesh/kiali-rhel9:2.4.11-1764836335 | * |
| Red Hat OpenShift Service Mesh 3.1 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:2.11.5-1764835957 | * |
| Red Hat OpenShift Service Mesh 3.1 | RedHat | openshift-service-mesh/kiali-rhel9:2.11.5-1764836235 | * |
| Red Hat OpenShift Service Mesh 3.2 | RedHat | openshift-service-mesh/kiali-ossmc-rhel9:2.17.2-1764788140 | * |
| Red Hat OpenShift Service Mesh 3.2 | RedHat | openshift-service-mesh/kiali-rhel9:2.17.2-1764836459 | * |
| Red Hat Quay 3.1 | RedHat | quay/quay-rhel8:1770249183 | * |
| Red Hat Quay 3.12 | RedHat | quay/quay-rhel8:1769852013 | * |
| Red Hat Quay 3.13 | RedHat | quay/quay-rhel8:1773088862 | * |
| Red Hat Quay 3.14 | RedHat | quay/quay-rhel8:1773097621 | * |
| Red Hat Quay 3.15 | RedHat | quay/quay-rhel8:1770146565 | * |
| Red Hat Quay 3.16 | RedHat | quay/quay-rhel9:1767886976 | * |
| Red Hat Quay 3.9 | RedHat | quay/quay-rhel8:1770856103 | * |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/105.html
- https://cwe.mitre.org/data/definitions/273.html
- https://cwe.mitre.org/data/definitions/34.html