Forge: ASN.1 OID first arc truncation in asn1.oidToDer

Summary asn1.oidToDer did not range-check the first two arcs of an OID string, so an OID such as 0.42.840.113549.1.1.1 or 4294977127.18.840.113549.1.1.1 was encoded as the DER of a different OID here rsaEncryption, 1.2.840.113549.1.1.1. This is an incomplete fix of CVE-2025-66030. Fixed in...

GHSA-4642-5MCJ-2RQW Forge: ASN.1 OID first arc truncation in asn1.oidToDer

Summary asn1.oidToDer did not range-check the first two arcs of an OID string, so an OID such as 0.42.840.113549.1.1.1 or 4294977127.18.840.113549.1.1.1 was encoded as the DER of a different OID here rsaEncryption, 1.2.840.113549.1.1.1. This is an incomplete fix of CVE-2025-66030. Fixed in...

npm: Forge: ASN.1 OID first arc truncation in asn1.oidToDer

npm: Forge: ASN.1 OID first arc truncation in asn1.oidToDer vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

GHSA-6WVX-3R32-XMCG Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Summary The forge.http client stored cookies from Set-Cookie response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name proto to add properties to Object.prototype, use inherited names such as constructor to add properties to Object, and send an...

Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

Summary The forge.http client stored cookies from Set-Cookie response headers in a plain object keyed by cookie name and path. A malicious server could use the cookie name proto to add properties to Object.prototype, use inherited names such as constructor to add properties to Object, and send an...

npm: Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie

npm: Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113336

Forge: TLS client crash when the server sends no certificate...

GHSA-525V-9GP9-W22H Forge: TLS client crash when the server sends no certificate

Summary The forge TLS client's check for a missing server certificate read the wrong property and never ran. A malicious TLS server, or an on-path attacker who removes the server's Certificate message, can make connection.process throw a TypeError, which crashes applications that use the forge TL...

npm: Forge: TLS client crash when the server sends no certificate

npm: Forge: TLS client crash when the server sends no certificate vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

Forge: Regular expression denial of service in PEM decoding (pem.decode)

Summary pem.decode, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial time on input without a matching END line, and parsed encapsulated headers with regular expressions that take quadratic time on long header lines. A remote...

EUVD-2026-113337

Forge: Regular expression denial of service in PEM decoding pem.decode...

GHSA-7WCH-P9PX-956X Forge: Regular expression denial of service in PEM decoding (pem.decode)

Summary pem.decode, which every node-forge API that parses PEM input uses, split messages with a regular expression that takes polynomial time on input without a matching END line, and parsed encapsulated headers with regular expressions that take quadratic time on long header lines. A remote...

npm: Forge: Regular expression denial of service in PEM decoding (pem.decode)

npm: Forge: Regular expression denial of service in PEM decoding pem.decode vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113339

Forge: Denial of Service via infinite loop in BigInteger.modInverse with negative input incomplete fix of CVE-2026-33891...

Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

GHSA-H6CR-WJV9-3CPP Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

Summary BigInteger.prototype.modInverse in node-forge's bundled jsbn library enters an infinite loop when the value or the modulus is negative, for example when a negative public exponent is passed to forge.pki.rsa.generateKeyPair. This is an incomplete fix of CVE-2026-33891 GHSA-5m6q-g25r-mvwx,...

npm: Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)

npm: Forge: Denial of Service via infinite loop in BigInteger.modInverse with negative input incomplete fix of CVE-2026-33891 vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...

EUVD-2026-113338

Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store...

GHSA-4487-J8R4-4G2F Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

Summary When a CA store created by pki.createCaStore holds two or more certificates with the same subject name, pki.verifyCertificateChain permanently removes those certificates from the store while trying each one as the issuer. A peer can send any certificate that names that subject as its issu...

npm: Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

npm: Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...