Tag

npm-dependency-risk

Safeguard articles tagged "npm-dependency-risk" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

node-forge prototype pollution/signature verification issue (CVE-2020-7712)

node-forge's RSA signature verification (CVE-2022-24771/24772) and prototype pollution (CVE-2020-7720) let attackers forge trust decisions across X.509, PKCS#7, and PKCS#12 flows.

Jan 6, 20267 min read