DigitalBazaar Forge input validation error vulnerability

Versions of DigitalBazaar Forge prior to 1.4.1 contain a security vulnerability. This vulnerability arises when accepting PKCS12 MACs or PKCS12 encrypted with a password that have zero or fewer encryption iterations; as a result, a fixed key unrelated to both the password and salt is generated...