npm: Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store

npm: Forge: verifyCertificateChain removes trusted CA certificates with the same subject from the CA store vulnerability discovered by ? in WordPress npm node-forge versions = 1.4.0...