CVE-2026-118774

The Forge (node-forge) JavaScript TLS library, prior to version 1.4.1 , contains a vulnerability in the certificate.verify(child), _verifySignature(), and lib/x509.js components. The library incorrectly selects RSA padding and RSASSA-PSS parameters from the issuer certificate instead of the child...