
- Node-forge cryptography library flaw (CVE-2025-12816) allowed bypass of signature and certificate validation
- CERT-CC warns of risks including authentication bypass and signed data tampering
- Maintainers released version 1.3.2; developers urged to update immediately
A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts. The library has since been updated, and users are urged to move to the new version as soon as possible.