CVE-2026-125333

The Forge (node-forge) JavaScript TLS implementation is vulnerable to a Regular Expression Denial of Service (ReDoS) in versions 0.1.2 through 1.4.3 . The _trimString() function in lib/http.js uses a regular expression to remove trailing whitespace from response header values and cookie names/val...