All vulnerabilities
CVE-2026-85393CVE-2026-33894GHSA-86w9-cpqp-85rvGHSA-ppp5-5v6c-4jwp

node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements

digitalbazaar node-forgenpmLibraries & packages
Open in ThreatlineRecord JSON
CVSS
8.7High
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 3 Sep 2026. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.33%Chance of exploitation activity in the next 30 days, higher than 24% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published3 Sep 2026Updated 1 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.

Text from CVE List

Affected versions 3

  • node-forge, npm<= 1.4.0GitHub
  • forgeaffected: all versions through 1.4.0CVE List
  • node-forge, npmfrom first release, through 1.4.0OSV

References 9