Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-119188

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), fragmented handshake message, interleaved record to process the relevant input or security decision. node-forge continued processing after a TLS record of another content type interrupted a fragmented handshake message. A remote peer could trigger an uncaught TypeError in process(), causing the connection or hosting process to fail. This issue is fixed in version 1.4.1.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 36.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-119188


Contact Us

Shodan ® - All rights reserved