CVE-2026-118777

The Forge (or node-forge ) JavaScript library, a native implementation of Transport Layer Security, is vulnerable to Prototype Pollution in versions prior to 1.4.1 . The forge.http client incorrectly stores cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A ...