CVE-2026-119186

The record

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge did not validate the AES-GCM tagLength option passed to start() during decryption through forge.cipher.createDecipher(). When an application derived tagLength from received data or used an unset or zero-like configuration value, a value that converted to zero together with an empty or missing authentication tag caused the calculated and supplied tags to compare as empty, so decipher.finish() accepted unauthenticated ciphertext. Applications that omit tagLength to use the 128-bit default or pass a fixed valid tag length are unaffected. This issue is fixed in version 1.4.1.

Affected packages

Related vulnerabilities

• CVE-2026-118782 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-118776 Forge (also called node-forge) is a native implementation of Transport Layer Security in… CWE-354
• CVE-2026-90720 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024… CWE-354
• CVE-2026-116608 A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. CWE-354
• CVE-2026-65625 The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified… CWE-354
• CVE-2026-115906 zip is a zip library for Rust that supports reading and writing simple ZIP files. CWE-354
• CVE-2026-89320 `HmacShaCryptor.Hash` never hashed its input. CWE-354
• CVE-2026-35501 When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both… CWE-354