CVE-2026-119186

A flaw was found in node-forge. The library fails to validate the authentication tag length option when decrypting data using AES-GCM Advanced Encryption Standard in Galois/Counter Mode. A remote attacker can exploit this flaw by submitting crafted ciphertext with an empty authentication tag to...

CVE-2026-115906

A flaw was found in the zip crate. An attacker can bypass cryptographic authentication and cause applications to accept modified data by supplying a crafted encrypted archive. Because the AES Advanced Encryption Standard reader fails to verify the authentication tag when an encrypted entry is emp...