CVE-2026-119190

The Forge (node-forge) JavaScript TLS library versions prior to 1.4.1 contain a vulnerability in pki.verifyCertificateChain() where deprecated extension OIDs 2.5.29.10 and 2.5.29.13 are incorrectly parsed as basicConstraints . This oversight allows an attacker to bypass certificate constraints by...