Skip to content
Fencer Intel
high 8.6

CVE-2025-12816 json

CVE-2025-12816

published 11mo ago modified 24d ago also EUVD-2025-199630 , GHSA-5gfm-wpxj-wjgq

cvss
8.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 48%
public exploits
0
none known

Summary

An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.

Patch / fix

  • npm node-forge 1.3.2
  • grafana Manager Client Tools 15 11.6.11-150000.1.90.1
  • spacecmd openSUSE Leap 15.6, Manager Client Tools 15 5.0.15-150000.3.142.1
  • uyuni-tools Manager Client Tools for SLE Micro 5, Manager Client Tools 15 0.1.38-150000.1.30.1
  • dracut-saltboot openSUSE Leap 15.6, Manager Client Tools for SLE Micro 5, Manager Client Tools 15 1.1.0-150000.1.65.1
  • prometheus-blackbox_exporter openSUSE Leap 15.6, Manager Client Tools for SLE Micro 5, Manager Client Tools 15 0.26.0-150000.1.30.2
  • golang-github-prometheus-promu SLE Module for Package Hub 15 SP7, openSUSE Leap 15.6 0.17.0-150000.3.30.1
  • golang-github-boynux-squid_exporter openSUSE Leap 15.6, Manager Client Tools 15 1.13.0-150000.1.12.1
  • golang-github-prometheus-prometheus Manager Client Tools 15 3.5.0-150000.3.67.1

suse advisories SUSE-SU-2026:1013-1SUSE-SU-2026:1008-1SUSE-SU-2026:0630-1SUSE-SU-2026:0628-1

  • golang-github-prometheus-prometheus openSUSE Leap 16.0 3.5.0-160000.1.1

opensuse advisories openSUSE-SU-2026:20177-1

  • reaper CBL-Mariner 2.0 3.1.1-21

azure linux advisories AZL-71125

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Is CVE-2025-12816 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-12816 updated cvss 8.7

node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications

  • Red Hat Logging Subsystem for Red Hat OpenShift openshift-logging/kibana6-rhel8, openshift-logging/elasticsearch6-rhel9, openshift-logging/logging-curator5-rhel9, openshift-logging/elasticsearch-proxy-rhel9, openshift-logging/logging-view-plugin-rhel9, openshift-logging/elasticsearch-rhel9-operator, +1 more
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Migration Toolkit for Virtualization mtv-candidate/mtv-console-plugin-rhel9 Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-console-plugin-rhel9, openshift-lightspeed/lightspeed-console-plugin-pf5-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift Pipelines openshift-pipelines/pipelines-hub-ui-rhel9, openshift-pipelines/pipelines-hub-api-rhel8, openshift-pipelines/pipelines-hub-api-rhel9, openshift-pipelines/pipelines-hub-db-migration-rhel8, openshift-pipelines/pipelines-hub-db-migration-rhel9
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/acm-grafana-rhel9 Red Hat build of Apache Camel - HawtIO 4 io.hawt-project Red Hat build of Apicurio Registry 2 io.apicurio-apicurio-registry Red Hat Connectivity Link 1 rhcl-1/rhcl-console-plugin-rhel9 Red Hat Data Grid 8 org.infinispan-infinispan-console Red Hat Edge Manager preview rhem/flightctl-ui-rhel9, rhem/flightctl-ui-ocp-rhel9
    affected: workaround, no fix available
  • Red Hat Enterprise Linux AI (RHEL AI) 3 rhelai3/bootc-cuda-rhel9, rhelai3/disk-image-cuda-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 4 openshift4/ose-console-rhel9, openshift4/ose-monitoring-plugin-rhel9, openshift4/nmstate-console-plugin-rhel9
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift Dev Spaces devspaces-tech-preview/idea-rhel9 Red Hat OpenShift GitOps openshift-gitops-1/dex-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9, openshift-gitops-1/gitops-rhel8, openshift-gitops-1/must-gather-rhel8, openshift-gitops-1/argo-rollouts-rhel8, +3 more Red Hat Trusted Profile Analyzer rhtpa/rhtpa-trustification-service-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Migration Toolkit for Virtualization 2.9 migration-toolkit-virtualization 1769034026
    fixed: vendor fix RHSA-2026:1248
show 24 more
  • Red Hat Multicluster Global Hub 1.4.9 multicluster-globalhub 1770126537
    fixed: vendor fix RHSA-2026:2500
  • Red Hat Multicluster Global Hub 1.5.8 multicluster-globalhub 1770109405
    fixed: vendor fix RHSA-2026:2256
  • Red Hat Network Observability (NETOBSERV) 1.11.0 network-observability 1771227610, network-observability 1771227650
    fixed: vendor fix RHSA-2026:2900
  • Red Hat Advanced Cluster Security 4.8 advanced-cluster-security 1769615659
    fixed: vendor fix RHSA-2026:1517
  • Red Hat Advanced Cluster Security 4.9 advanced-cluster-security 1770074713, advanced-cluster-security 1770250889
    fixed: vendor fix RHSA-2026:2350
  • Red Hat Ceph Storage 8 rhceph 1770630607
    fixed: vendor fix RHSA-2026:2737
  • Red Hat Ceph Storage 9.2 rhceph/rhceph-9-rhel10 1790843527
    fixed: vendor fix RHSA-2026:86618
  • Red Hat Developer Hub 1.7 rhdh 1.7.4-1767715042
    fixed: vendor fix RHSA-2026:0261
  • Red Hat Discovery 2 discovery 1767904573
    fixed: vendor fix RHSA-2026:0414
  • Red Hat Migration Toolkit 1.8 rhmtc/openshift-migration-ui-rhel8 1783690532
    fixed: vendor fix RHSA-2026:41928
  • Red Hat OpenShift AI 2.16 rhoai 1774282136
    fixed: vendor fix RHSA-2026:5807
  • Red Hat OpenShift AI 2.25 rhoai 1770053703, rhoai 1770053721, rhoai 1770053723, rhoai 1770053728, rhoai 1770053730, rhoai 1770053733, +15 more
    fixed: vendor fix RHSA-2026:2106
  • Red Hat OpenShift AI 3.3 rhoai 1769162595, rhoai 1771502843, rhoai 1771502844, rhoai 1771502845, rhoai 1771502863, rhoai 1771502869, +14 more
    fixed: vendor fix RHSA-2026:19712
  • Red Hat OpenShift Container Platform 4.19 openshift4/ose-networking-console-plugin-rhel9 1779256322
    fixed: vendor fix RHSA-2026:20041
  • Red Hat Openshift Data Foundation 4.17 odf4/cephcsi-rhel9 1791966003, odf4/odf-cli-rhel9 1791888742, odf4/mcg-core-rhel9 1791889616, odf4/odf-console-rhel9 1791887928, odf4/mcg-rhel9-operator 1791889753, odf4/ocs-rhel9-operator 1791960285, +13 more
    fixed: vendor fix RHSA-2026:83622
  • Red Hat Openshift Data Foundation 4.18 odf4/cephcsi-rhel9 1783676191, odf4/odf-cli-rhel9 1784094299, odf4/mcg-core-rhel9 1784094353, odf4/odf-console-rhel9 1784094725, odf4/mcg-rhel9-operator 1784093953, odf4/ocs-rhel9-operator 1783676675, +13 more
    fixed: vendor fix RHSA-2026:41941
  • Red Hat Openshift Data Foundation 4.19 odf4/cephcsi-rhel9 1783684360, odf4/odf-cli-rhel9 1784054873, odf4/mcg-core-rhel9 1784054582, odf4/odf-console-rhel9 1784055589, odf4/mcg-rhel9-operator 1784054606, odf4/ocs-rhel9-operator 1783684667, +14 more
    fixed: vendor fix RHSA-2026:41944
  • Red Hat Openshift Data Foundation 4.20 odf4/cephcsi-rhel9 1783667125, odf4/odf-cli-rhel9 1784055020, odf4/mcg-core-rhel9 1784054598, odf4/odf-console-rhel9 1784055586, odf4/mcg-rhel9-operator 1784055387, odf4/ocs-rhel9-operator 1783667611, +16 more
    fixed: vendor fix RHSA-2026:40984
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.26 devspaces 1769804221
    fixed: vendor fix RHSA-2026:2456
  • Red Hat OpenShift GitOps 1.17 openshift-gitops-1 1772195995
    fixed: vendor fix RHSA-2026:3869
  • Red Hat OpenShift GitOps 1.18 openshift-gitops-1 1772438822
    fixed: vendor fix RHSA-2026:3874
  • Red Hat OpenShift Pipelines 1.15 openshift-pipelines 1772036471, openshift-pipelines 1772110573
    fixed: vendor fix RHSA-2026:3710
  • Red Hat OpenShift Pipelines 1.20 openshift-pipelines 1770988020
    fixed: vendor fix RHSA-2026:3825
  • Red Hat OpenShift Service Mesh 2.6 openshift-service-mesh 1.73.25-1764836020, openshift-service-mesh 1.73.25-1764836138
    fixed: vendor fix RHSA-2025:22936

10 more fixed, 52 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-26-071-03 updated cvss 8.6

Siemens SIDIS Prime

  • Siemens SIDIS Prime < 4.0.800
    affected: fixed in V4.0.800

Facts from CISA's republication of the vendor's own advisory (CSAF); the linked advisory is the authoritative source. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
yes
Technical impact
partial
Assessed
11mo ago

Exploit prediction

0.58% chance of exploitation in the next 30 days, higher than 48% of all scored CVEs (FIRST EPSS, 2026-11-11).

Exploits and checks

  • github.com https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
GitHub 3.1 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CNA 3.1 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Affected packages

ecosystem package affected fixed in
npm node-forge
<1.3.2
1.3.2

Affected products

  • Digital Bazaar node-forge
  • Digital Bazaar forge

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

The maintainers of digitalbazaar/forge published their own advisory on GitHub. Reviewed sources take precedence over it.