CVE-2026-119192

Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encoding

node-forge

### Summary RSASSA-PKCS1-v1_5 signature verification (`publicKey.verify()` with the default scheme, also used by X.509 certificate and PKCS#7 verification) accepted non-canonical BER encodings of the DigestInfo, such as NULL parameters with content and non-minimal lengths. These leave attacker-controlled bytes inside an accepted DigestInfo, which allows signatures to be forged without the private key for RSA keys with a low public exponent (e=3). Fixed in node-forge 1.4.1…

10. Nov 2026

Ausgewertete Quellen

• GitHub
  GHSA-6qrw-m8cv-hcxf