Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:digitalbazaar:node-Forge:*:*:*:*:*:node.js:*:*

1 brief RSS
high advisory

Digital Bazaar node-forge: ReDoS in pem.decode() (CVE-2026-118779)

Digital Bazaar node-forge versions prior to 1.4.1 are vulnerable to a Regular Expression Denial of Service (ReDoS) in the pem.decode() function, allowing unauthenticated attackers to cause high CPU usage via malformed PEM input.

node-forge
1t 2c