CVE-2026-118779

A flaw was found in node-forge. The pem.decode function uses inefficient regular expressions when parsing Privacy-Enhanced Mail PEM data with missing end boundaries or long encapsulated headers. A remote, unauthenticated attacker can exploit this vulnerability by submitting specially crafted PEM...