CVE-2026-118779

The Forge (also known as node-forge ) JavaScript library, a native implementation of Transport Layer Security, is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions prior to 1.4.1 . The root cause is the use of polynomial-time regular expressions within the pem.decode() func...