CVE-2026-119189

A flaw was found in node-forge. The certificate verification mechanism fails to enforce path length constraints on Certificate Authority CA certificates that lack a key usage extension. A remote attacker with control of a subordinate certificate can exploit this flaw by presenting a certificate...