Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

EUVD-2026-113339

Forge: Denial of Service via infinite loop in BigInteger.modInverse with negative input incomplete fix of CVE-2026-33891...

GHSA-H6CR-WJV9-3CPP Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

npm: Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

npm: Forge: Denial of Service via infinite loop in BigInteger.modInverse with negative input incomplete fix of CVE-2026-33891 vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Summary When a CA store created by pki.createCaStore holds two or more certificates with the same subject name, pki.verifyCertificateChain permanently removes those certificates from the store while trying each one as the issuer. A peer can send any certificate that names that subject as its issu...

EUVD-2026-113338

Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store...

GHSA-4487-J8R4-4G2F Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Summary When a CA store created by pki.createCaStore holds two or more certificates with the same subject name, pki.verifyCertificateChain permanently removes those certificates from the store while trying each one as the issuer. A peer can send any certificate that names that subject as its issu...

npm: Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

npm: Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113363

Forge: AES-GCM authentication bypass via unvalidated tagLength option...

GHSA-5CWG-6VW7-RJ6P Forge: AES-GCM authentication bypass via unvalidated tagLength option

Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start. With a tagLength of 0 or a value that converts to 0 such as null, false, '' or '0', the authentication tag is empty, and decipher.finish returns true for any ciphertext and additional data when the...

Forge: AES-GCM authentication bypass via unvalidated tagLength option

Summary The AES-GCM mode in forge.cipher does not validate the tagLength option passed to start. With a tagLength of 0 or a value that converts to 0 such as null, false, '' or '0', the authentication tag is empty, and decipher.finish returns true for any ciphertext and additional data when the...

npm: Forge: AES-GCM authentication bypass via unvalidated tagLength option

npm: Forge: AES-GCM authentication bypass via unvalidated tagLength option vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

EUVD-2026-113341

Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count...

GHSA-JC66-7Q78-782G Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

Summary forge.pkcs12.pkcs12FromAsn1 accepts a PKCS12 MAC iteration count of zero or less from the input, and the PKCS12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS12/PFX file and...

npm: Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

npm: Forge: PKCS12 MAC forgery and constant-key PBE via zero iteration count vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113365

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message...

GHSA-8HRF-8G6F-7XWP Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Summary A connection created with forge.tls.createConnection throws an uncaught TypeError from process when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the handshake,...

Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Summary A connection created with forge.tls.createConnection throws an uncaught TypeError from process when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the handshake,...

npm: Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

npm: Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...