CVE-2026-118779

About vulnerability

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode(), lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in pem.decode(), including when searching for a matching END line and parsing encapsulated headers. An unauthenticated attacker able to supply PEM input to any high-level parser could consume excessive CPU with a long malformed message and cause denial of service. This issue is fixed in version 1.4.1.

Affected product:

@expo/build-tools , @ledgerhq/lumen-ui-rnative , React , Vue , ai-sdk-harness-cline , ai-sdk-js , analogjs-platform , analogjs-vite-plugin-nitro , angular-devkit-build-angular , angular-devkit-build-webpack , astrojs-netlify , async-storage , aws-cdk , babel-plugin-remove-graphql-queries , babel-preset-expo , blockchain-link-utils , callstack-repack , celo-wallet-hsm-gcp , chainsafe-libp2p-noise , clerk-clerk-expo , clerk-expo , clerk-expo-biometrics , clerk-expo-google-signin , clerk-expo-native-components , clerk-expo-passkeys , cline , cline-llms , cline-sdk , cloud-sdk-js , create-react-app , dev-middleware , devicefarmer-adbkit , docusaurus , docusaurus-core , docusaurus-plugin-content-blog , docusaurus-plugin-content-docs , docusaurus-plugin-content-pages , docusaurus-plugin-debug , docusaurus-plugin-google-analytics , docusaurus-plugin-google-gtag , docusaurus-plugin-google-tag-manager , docusaurus-plugin-sitemap , docusaurus-preset-classic , docusaurus-theme-classic , docusaurus-theme-common , docusaurus-theme-mermaid , docusaurus-theme-search-algolia , dotenvx-dotenvx , eas-cli , electron-webpack , ethereumjs-client , expo , expo-app-integrity , expo-app-intents , expo-app-loading , expo-apple-authentication , expo-application , expo-asset , expo-audio , expo-auth-session , expo-av , expo-background-fetch , expo-background-task , expo-barcode-scanner , expo-battery , expo-blur , expo-branch , expo-brightness , expo-build-properties , expo-calendar , expo-camera , expo-cli , expo-clipboard , expo-code-signing-certificates , expo-config , expo-configure-splash-screen , expo-constants , expo-contacts , expo-crypto , expo-dev-client , expo-dev-client-components , expo-dev-launcher , expo-dev-menu , expo-dev-menu-interface , expo-dev-server , expo-dev-tools , expo-device , expo-document-picker , expo-electron-adapter , expo-error-recovery , expo-expo-cli , expo-file-system , expo-firebase-analytics , expo-firebase-core , expo-firebase-recaptcha , expo-font , expo-gl , expo-glass-effect , expo-google-app-auth , expo-haptics , expo-hinge , expo-image , expo-image-loader , expo-image-picker , expo-insights , expo-intent-launcher , expo-keep-awake , expo-linear-gradient , expo-linking , expo-local-authentication , expo-localization , expo-location , expo-mail-composer , expo-manifests , expo-maps , expo-media-library , expo-mesh-gradient , expo-metro-config , expo-module-scripts , expo-modules-cli , expo-modules-core , expo-modules-jsi , expo-modules-test-core , expo-navigation-bar , expo-network , expo-network-addons , expo-next-adapter , expo-notifications , expo-permissions , expo-pkcs12 , expo-prebuild-config , expo-print , expo-processing , expo-pwa , expo-random , expo-router , expo-router-server , expo-screen-capture , expo-screen-orientation , expo-secure-store , expo-sensors , expo-sharing , expo-sms , expo-speech , expo-splash-screen , expo-sqlite , expo-standard-web-crypto , expo-status-bar , expo-store-review , expo-symbols , expo-system-ui , expo-task-manager , expo-template-bare-minimum , expo-template-blank , expo-template-blank-typescript , expo-template-default , expo-template-tabs , expo-tracking-transparency , expo-updates , expo-updates-interface , expo-vector-icons , expo-video , expo-video-thumbnails , expo-web-browser , expo-webpack-config , expo-widgets , expo-xdl , expo-yarn-workspaces , gatsby , gatsby-cypress , gatsby-interface , gatsby-plugin-compile-es6-packages , gatsby-plugin-emotion , gatsby-plugin-fathom , gatsby-plugin-feed , gatsby-plugin-google-gtag , gatsby-plugin-guess-js , gatsby-plugin-less , gatsby-plugin-manifest , gatsby-plugin-netlify , gatsby-plugin-no-sourcemaps , gatsby-plugin-offline , gatsby-plugin-page-creator , gatsby-plugin-postcss , gatsby-plugin-preact , gatsby-plugin-preload-fonts , gatsby-plugin-react-helmet , gatsby-plugin-schema-snapshot , gatsby-plugin-sharp , gatsby-plugin-sitemap , gatsby-plugin-styletron , gatsby-plugin-typography , gatsby-react-router-scroll , gatsby-remark-code-repls , gatsby-remark-embed-snippet , gatsby-remark-prismjs , gatsby-remark-responsive-iframe , gatsby-source-contentful , gatsby-source-drupal , gatsby-source-filesystem , gatsby-source-graphql , gatsby-source-shopify , gatsby-source-wordpress , gatsby-transformer-react-docgen , gatsby-transformer-remark , gatsby-transformer-sqip , gatsby-transformer-toml , gax-nodejs , gcs-resumable-upload , google-ai-generativelanguage , google-api-nodejs-client , google-auth-library , google-cloud-common , google-cloud-kms , google-cloud-opentelemetry-cloud-monitoring-exporter , google-cloud-storage , google-p12-pem , googleapis-alertcenter , googleapis-common , googleapis-composer , googleapis-dataflow , googleapis-fcm , googleapis-forms , googleapis-gmail , googleapis-healthcare , googleapis-networkmanagement , googleapis-run , googleapis-sqladmin , googleapis-testing , grpc-grpc-js-xds , gtoken , guess , hiero-sdk-js , ipx , jest-expo , jks-js , js-interfaces , js-libp2p-bootstrap , js-libp2p-crypto , js-libp2p-kad-dht , js-peer-id , ledger-cosmos-js , ledger-live , ledgerhq-crypto-icons , ledgerhq-live-cli , ledgerhq-live-common , ledgerhq-native-ui , libp2p , libp2p-interfaces-compliance-tests , listhen , livestore , magic-js , mastra-auth-okta , mdx , microsoft-365-agents-toolkit , mkcert , mockttp , modern-js-image , modern.js , monorepo , netlify-dev , netlify-images , netlify-nuxt , netlify-vite-plugin , netlify-vite-plugin-tanstack-start , newman , nitro , nitroparty , node-forge , node-jose , nodejs-datastore , npm:gatsby-theme-blog-core , nuxt , nuxt-cli , nuxt-devtools , nuxt-devtools-kit , nuxt-devtools-ui-kit , nuxt-nitro-server , nuxt-rspack-builder , nuxt-vite-builder , nuxt-vite-server , nuxt-webpack-builder , office-addin-debugging , office-addin-dev-settings , office-addin-scripts , okta-sdk-nodejs , onflow-fcl-react-native , opencensus-node , openllmetry-js , opentelemetry-operations-js , orama-orama , parcel-bundler , patch-project , postman-runtime , powersync-nuxt , remotion-cloudrun , repack , rock-js-plugin-expo-config-plugins , rsbuild-image , rspack-cli , rspack-dev-server , rushstack-debug-certificate-manager , rushstack-heft-dev-cert-plugin , rushstack-heft-rspack-plugin , rushstack-heft-vscode-extension-rig , rushstack-heft-web-rig , rushstack-heft-webpack4-plugin , rushstack-heft-webpack5-plugin , rushstack-rush-serve-plugin , sap-ai-provider , sap-ai-sdk-core , sap-ai-sdk-document-grounding , sap-ai-sdk-foundation-models , sap-ai-sdk-orchestration , sap-ai-sdk-prompt-registry , sap-ai-sdk-rpt , sap-cloud-sdk-http-client , sap-cloud-sdk-openapi , selfsigned , sentry-nuxt , sentry-solidstart , solidjs-start , sonarqube-scanner , storybook-angular , storybook-preset-create-react-app , svgr , tanstack-expo-db-sqlite-persistence , theme-ui , trezor-connect-web , trezor-env-utils , trezor-suite , unimodules-task-manager-interface , unstorage , vinxi , vinxi-router , vinxi-server-components , vinxi-server-functions , wallet-adapter , webpack-dev-server , whistle , xdl , zephyr-nuxt-module

Affected packages:

node-forge @ 0.10.0 (+7470 more)