POPULAR FORGE LIBRARY GETS FIX FOR SIGNATURE VERIFICATION BYPASS FLAW

Summary from the TLDR InfoSec newsletter

CVE-2025-12816 is a high-severity ASN.1 validation flaw in node-forge versions 1.3.1 and earlier (26M weekly NPM downloads) that allows attackers to craft malformed data.