{
  "@id": "urn:uuid:1ca7c845-3fc4-4f4c-8d5f-918e64ec66e6",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 14,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T21:23:26.917293+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2020-7720 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2020-7720"
      },
      "action_statement": "Vulnerability CVE-2020-7720 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2022-0122 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2022-0122"
      },
      "action_statement": "Vulnerability CVE-2022-0122 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2022-24771 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24771"
      },
      "action_statement": "Vulnerability CVE-2022-24771 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2022-24772 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24772"
      },
      "action_statement": "Vulnerability CVE-2022-24772 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2022-24773 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24773"
      },
      "action_statement": "Vulnerability CVE-2022-24773 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2025-12816 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-12816"
      },
      "action_statement": "Vulnerability CVE-2025-12816 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2025-66030 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-66030"
      },
      "action_statement": "Vulnerability CVE-2025-66030 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2025-66031 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-66031"
      },
      "action_statement": "Vulnerability CVE-2025-66031 affects version 0.9.0 of node-forge."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T16:36:14.525520+00:00",
      "status_notes": "Vulnerability CVE-2026-118774 does not affect version 0.9.0 of node-forge. not_affected \u2014 node-forge 0.9.0-tuxcare.3 is not affected. In lib/x509.js, cert.verify(child) already selects the padding scheme (PKCS#1 v1.5 or RSASSA-PSS) and the PSS parameters from the child certificate's own signatureOid and signatureParameters, and verifies with the issuer's public key. The flawed _verifySignature() helper, which chose the scheme from the issuer's own signature algorithm, does not exist...",
      "vulnerability": {
        "name": "CVE-2026-118774"
      },
      "impact_statement": "not_affected \u2014 node-forge 0.9.0-tuxcare.3 is not affected. In lib/x509.js, cert.verify(child) already selects the padding scheme (PKCS#1 v1.5 or RSASSA-PSS) and the PSS parameters from the child certificate's own signatureOid and signatureParameters, and verifies with the issuer's public key. The flawed _verifySignature() helper, which chose the scheme from the issuer's own signature algorithm, does not exist..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118775 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-118775"
      },
      "action_statement": "Vulnerability CVE-2026-118775 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T20:24:33.048967+00:00",
      "status_notes": "Vulnerability CVE-2026-118776 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-118776"
      },
      "action_statement": "Vulnerability CVE-2026-118776 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.4."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118777 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-118777"
      },
      "action_statement": "Vulnerability CVE-2026-118777 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118778 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-118778"
      },
      "action_statement": "Vulnerability CVE-2026-118778 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2026-118779 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-118779"
      },
      "action_statement": "Vulnerability CVE-2026-118779 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2026-118780 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-118780"
      },
      "action_statement": "Vulnerability CVE-2026-118780 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-06T09:08:00.029082+00:00",
      "status_notes": "Vulnerability CVE-2026-118781 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-118781"
      },
      "action_statement": "Vulnerability CVE-2026-118781 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2026-118782 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-118782"
      },
      "action_statement": "Vulnerability CVE-2026-118782 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2026-119186 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-119186"
      },
      "action_statement": "Vulnerability CVE-2026-119186 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability CVE-2026-119187 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "CVE-2026-119187"
      },
      "action_statement": "Vulnerability CVE-2026-119187 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-119188 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-119188"
      },
      "action_statement": "Vulnerability CVE-2026-119188 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119189 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119189"
      },
      "action_statement": "Vulnerability CVE-2026-119189 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-119190 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-119190"
      },
      "action_statement": "Vulnerability CVE-2026-119190 affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119191 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119191"
      },
      "action_statement": "Vulnerability CVE-2026-119191 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119192 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119192"
      },
      "action_statement": "Vulnerability CVE-2026-119192 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125332 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125332"
      },
      "action_statement": "Vulnerability CVE-2026-125332 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125333 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125333"
      },
      "action_statement": "Vulnerability CVE-2026-125333 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T21:18:37.645708+00:00",
      "status_notes": "Vulnerability CVE-2026-125334 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125334"
      },
      "action_statement": "Vulnerability CVE-2026-125334 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125335 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125335"
      },
      "action_statement": "Vulnerability CVE-2026-125335 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2026-33891 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33891"
      },
      "action_statement": "Vulnerability CVE-2026-33891 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2026-33894 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33894"
      },
      "action_statement": "Vulnerability CVE-2026-33894 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2026-33895 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33895"
      },
      "action_statement": "Vulnerability CVE-2026-33895 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability CVE-2026-33896 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33896"
      },
      "action_statement": "Vulnerability CVE-2026-33896 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-01T21:19:46.058769+00:00",
      "status_notes": "Vulnerability CVE-2026-85393 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-85393"
      },
      "action_statement": "Vulnerability CVE-2026-85393 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability GHSA-5rrq-pxf6-6jx5 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "GHSA-5rrq-pxf6-6jx5"
      },
      "action_statement": "Vulnerability GHSA-5rrq-pxf6-6jx5 affects version 0.9.0 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-11-04T18:46:27.760840+00:00",
      "status_notes": "Vulnerability GHSA-gf8q-jrpm-jvxq affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1.",
      "vulnerability": {
        "name": "GHSA-gf8q-jrpm-jvxq"
      },
      "action_statement": "Vulnerability GHSA-gf8q-jrpm-jvxq affects version 0.9.0 of node-forge, and is fixed in 0.9.0-tuxcare.1."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0"
          }
        }
      ],
      "timestamp": "2026-10-15T13:44:00.236667+00:00",
      "status_notes": "Vulnerability GHSA-wxgw-qj99-44c2 affects version 0.9.0 of node-forge.",
      "vulnerability": {
        "name": "GHSA-wxgw-qj99-44c2"
      },
      "action_statement": "Vulnerability GHSA-wxgw-qj99-44c2 affects version 0.9.0 of node-forge."
    }
  ]
}