CVE-2026-119191

The Forge (or node-forge ) JavaScript TLS implementation is vulnerable to resource exhaustion in versions prior to 1.4.1 . The root cause is located in the asn1.fromDer() function, where the software fails to consistently apply the maxDepth limit when decoding ASN.1 stored inside BIT STRING value...