{
  "@id": "urn:uuid:b221772d-8989-4969-b9aa-2af46692352d",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 8,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-10T21:23:26.917293+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2020-7720 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2020-7720"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2022-0122 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-0122"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2022-24771 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24771"
      },
      "action_statement": "Vulnerability CVE-2022-24771 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2022-24772 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24772"
      },
      "action_statement": "Vulnerability CVE-2022-24772 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2022-24773 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2022-24773"
      },
      "action_statement": "Vulnerability CVE-2022-24773 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2025-12816 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-12816"
      },
      "action_statement": "Vulnerability CVE-2025-12816 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2025-66030 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-66030"
      },
      "action_statement": "Vulnerability CVE-2025-66030 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2025-66031 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2025-66031"
      },
      "action_statement": "Vulnerability CVE-2025-66031 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T16:36:14.525520+00:00",
      "status_notes": "Vulnerability CVE-2026-118774 does not affect version 0.9.0-tuxcare.2 of node-forge. not_affected \u2014 node-forge 0.9.0-tuxcare.3 is not affected. In lib/x509.js, cert.verify(child) already selects the padding scheme (PKCS#1 v1.5 or RSASSA-PSS) and the PSS parameters from the child certificate's own signatureOid and signatureParameters, and verifies with the issuer's public key. The flawed _verifySignature() helper, which chose the scheme from the issuer's own signature algorithm, does not exist...",
      "vulnerability": {
        "name": "CVE-2026-118774"
      },
      "impact_statement": "not_affected \u2014 node-forge 0.9.0-tuxcare.3 is not affected. In lib/x509.js, cert.verify(child) already selects the padding scheme (PKCS#1 v1.5 or RSASSA-PSS) and the PSS parameters from the child certificate's own signatureOid and signatureParameters, and verifies with the issuer's public key. The flawed _verifySignature() helper, which chose the scheme from the issuer's own signature algorithm, does not exist..."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118775 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118775"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T20:24:33.048967+00:00",
      "status_notes": "Vulnerability CVE-2026-118776 affects version 0.9.0-tuxcare.2 of node-forge, and is fixed in 0.9.0-tuxcare.4.",
      "vulnerability": {
        "name": "CVE-2026-118776"
      },
      "action_statement": "Vulnerability CVE-2026-118776 affects version 0.9.0-tuxcare.2 of node-forge, and is fixed in 0.9.0-tuxcare.4."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118777 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118777"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-118778 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118778"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-118779 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118779"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-118780 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118780"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-06T09:08:00.029082+00:00",
      "status_notes": "Vulnerability CVE-2026-118781 affects version 0.9.0-tuxcare.2 of node-forge, and is fixed in 0.9.0-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-118781"
      },
      "action_statement": "Vulnerability CVE-2026-118781 affects version 0.9.0-tuxcare.2 of node-forge, and is fixed in 0.9.0-tuxcare.3."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-118782 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-118782"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-119186 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119186"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-119187 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119187"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-119188 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119188"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119189 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119189"
      },
      "action_statement": "Vulnerability CVE-2026-119189 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:55.217574+00:00",
      "status_notes": "Vulnerability CVE-2026-119190 is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119190"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119191 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119191"
      },
      "action_statement": "Vulnerability CVE-2026-119191 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T16:32:43.826664+00:00",
      "status_notes": "Vulnerability CVE-2026-119192 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-119192"
      },
      "action_statement": "Vulnerability CVE-2026-119192 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125332 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125332"
      },
      "action_statement": "Vulnerability CVE-2026-125332 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125333 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125333"
      },
      "action_statement": "Vulnerability CVE-2026-125333 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T21:18:37.645708+00:00",
      "status_notes": "Vulnerability CVE-2026-125334 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125334"
      },
      "action_statement": "Vulnerability CVE-2026-125334 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-10T21:23:26.917293+00:00",
      "status_notes": "Vulnerability CVE-2026-125335 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-125335"
      },
      "action_statement": "Vulnerability CVE-2026-125335 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-33891 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33891"
      },
      "action_statement": "Vulnerability CVE-2026-33891 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-33894 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33894"
      },
      "action_statement": "Vulnerability CVE-2026-33894 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-33895 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33895"
      },
      "action_statement": "Vulnerability CVE-2026-33895 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-33896 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-33896"
      },
      "action_statement": "Vulnerability CVE-2026-33896 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability CVE-2026-85393 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "CVE-2026-85393"
      },
      "action_statement": "Vulnerability CVE-2026-85393 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability GHSA-5rrq-pxf6-6jx5 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "GHSA-5rrq-pxf6-6jx5"
      },
      "action_statement": "Vulnerability GHSA-5rrq-pxf6-6jx5 affects version 0.9.0-tuxcare.2 of node-forge."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability GHSA-gf8q-jrpm-jvxq is fixed in version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "GHSA-gf8q-jrpm-jvxq"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:npm/node-forge@0.9.0-tuxcare.2",
          "identifiers": {
            "purl": "pkg:npm/node-forge@0.9.0-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-04T22:50:20.904047+00:00",
      "status_notes": "Vulnerability GHSA-wxgw-qj99-44c2 affects version 0.9.0-tuxcare.2 of node-forge.",
      "vulnerability": {
        "name": "GHSA-wxgw-qj99-44c2"
      },
      "action_statement": "Vulnerability GHSA-wxgw-qj99-44c2 affects version 0.9.0-tuxcare.2 of node-forge."
    }
  ]
}