CVE-2026-118775

The Forge (node-forge) JavaScript TLS implementation is vulnerable in versions prior to 1.4.1 due to a missing range-check in the asn1.oidToDer() function within lib/asn1.js . An attacker providing an untrusted OID string that the application authorizes could cause the software to emit a DER repr...