EUVD-2026-113341

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

PT-2026-132796

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...

CVE-2026-118782: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge accepted a PKCS12 MAC or PKCS12 password-based encryption iteration count of zero or less. pki.pbe.generatePkcs12Key then returned a constant key independent of the passwo...