CVE-2026-118778

A flaw was found in node-forge. The Transport Layer Security TLS client improperly validates whether a server certificate was provided during the handshake. A malicious server or an on-path attacker can exploit this flaw by omitting the certificate message, triggering an uncaught exception that...