CVE-2026-118778

The Forge (also known as node-forge ) JavaScript TLS implementation is vulnerable to a crash in versions prior to 1.4.1 . The flaw exists in the TLS client when using forge.tls.createConnection(), c.session.serverCertificate, and RSA key exchange . Specifically, the client checks the incorrect pr...