CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-119189

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, node-forge enforced an X.509 CA certificate's basicConstraints.pathLenConstraint only when that certificate also carried a keyUsage extension. Exploitation requires a path-length-constrained CA without keyUsage that chains to a root trusted by the application, and an attacker who holds that CA's private key or obtains a subordinate CA certificate from it. The attacker could then construct a chain exceeding the declared path length that still passed pki.verifyCertificateChain(). Public web PKI CA certificates normally include keyUsage; private PKIs with CA certificates created without it are more likely to be affected. This issue is fixed in version 1.4.1.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 6.5%

CVSS Severity

CVSS v3 Score 5.9

References

Products affected by CVE-2026-119189

Digitalbazaar » Forge » Version: N/A

cpe:2.3:a:digitalbazaar:forge:-
Digitalbazaar » Forge » Version: 0.1.10

cpe:2.3:a:digitalbazaar:forge:0.1.10
Digitalbazaar » Forge » Version: 0.1.11

cpe:2.3:a:digitalbazaar:forge:0.1.11
Digitalbazaar » Forge » Version: 0.1.12

cpe:2.3:a:digitalbazaar:forge:0.1.12
Digitalbazaar » Forge » Version: 0.1.13

cpe:2.3:a:digitalbazaar:forge:0.1.13
Digitalbazaar » Forge » Version: 0.1.14

cpe:2.3:a:digitalbazaar:forge:0.1.14
Digitalbazaar » Forge » Version: 0.1.15

cpe:2.3:a:digitalbazaar:forge:0.1.15
Digitalbazaar » Forge » Version: 0.1.2

cpe:2.3:a:digitalbazaar:forge:0.1.2
Digitalbazaar » Forge » Version: 0.1.3

cpe:2.3:a:digitalbazaar:forge:0.1.3
Digitalbazaar » Forge » Version: 0.1.4

cpe:2.3:a:digitalbazaar:forge:0.1.4
Digitalbazaar » Forge » Version: 0.1.5

cpe:2.3:a:digitalbazaar:forge:0.1.5
Digitalbazaar » Forge » Version: 0.1.6

cpe:2.3:a:digitalbazaar:forge:0.1.6
Digitalbazaar » Forge » Version: 0.1.7

cpe:2.3:a:digitalbazaar:forge:0.1.7
Digitalbazaar » Forge » Version: 0.1.8

cpe:2.3:a:digitalbazaar:forge:0.1.8
Digitalbazaar » Forge » Version: 0.1.9

cpe:2.3:a:digitalbazaar:forge:0.1.9
Digitalbazaar » Forge » Version: 0.10.0

cpe:2.3:a:digitalbazaar:forge:0.10.0
Digitalbazaar » Forge » Version: 0.2.0

cpe:2.3:a:digitalbazaar:forge:0.2.0
Digitalbazaar » Forge » Version: 0.2.1

cpe:2.3:a:digitalbazaar:forge:0.2.1
Digitalbazaar » Forge » Version: 0.2.10

cpe:2.3:a:digitalbazaar:forge:0.2.10
Digitalbazaar » Forge » Version: 0.2.11

cpe:2.3:a:digitalbazaar:forge:0.2.11
Digitalbazaar » Forge » Version: 0.2.12

cpe:2.3:a:digitalbazaar:forge:0.2.12
Digitalbazaar » Forge » Version: 0.2.13

cpe:2.3:a:digitalbazaar:forge:0.2.13
Digitalbazaar » Forge » Version: 0.2.14

cpe:2.3:a:digitalbazaar:forge:0.2.14
Digitalbazaar » Forge » Version: 0.2.15

cpe:2.3:a:digitalbazaar:forge:0.2.15
Digitalbazaar » Forge » Version: 0.2.16

cpe:2.3:a:digitalbazaar:forge:0.2.16
Digitalbazaar » Forge » Version: 0.2.17

cpe:2.3:a:digitalbazaar:forge:0.2.17
Digitalbazaar » Forge » Version: 0.2.18

cpe:2.3:a:digitalbazaar:forge:0.2.18
Digitalbazaar » Forge » Version: 0.2.19

cpe:2.3:a:digitalbazaar:forge:0.2.19
Digitalbazaar » Forge » Version: 0.2.2

cpe:2.3:a:digitalbazaar:forge:0.2.2
Digitalbazaar » Forge » Version: 0.2.20

cpe:2.3:a:digitalbazaar:forge:0.2.20
Digitalbazaar » Forge » Version: 0.2.21

cpe:2.3:a:digitalbazaar:forge:0.2.21
Digitalbazaar » Forge » Version: 0.2.22

cpe:2.3:a:digitalbazaar:forge:0.2.22
Digitalbazaar » Forge » Version: 0.2.23

cpe:2.3:a:digitalbazaar:forge:0.2.23
Digitalbazaar » Forge » Version: 0.2.24

cpe:2.3:a:digitalbazaar:forge:0.2.24
Digitalbazaar » Forge » Version: 0.2.25

cpe:2.3:a:digitalbazaar:forge:0.2.25
Digitalbazaar » Forge » Version: 0.2.26

cpe:2.3:a:digitalbazaar:forge:0.2.26
Digitalbazaar » Forge » Version: 0.2.27

cpe:2.3:a:digitalbazaar:forge:0.2.27
Digitalbazaar » Forge » Version: 0.2.28

cpe:2.3:a:digitalbazaar:forge:0.2.28
Digitalbazaar » Forge » Version: 0.2.29

cpe:2.3:a:digitalbazaar:forge:0.2.29
Digitalbazaar » Forge » Version: 0.2.3

cpe:2.3:a:digitalbazaar:forge:0.2.3
Digitalbazaar » Forge » Version: 0.2.30

cpe:2.3:a:digitalbazaar:forge:0.2.30
Digitalbazaar » Forge » Version: 0.2.31

cpe:2.3:a:digitalbazaar:forge:0.2.31
Digitalbazaar » Forge » Version: 0.2.32

cpe:2.3:a:digitalbazaar:forge:0.2.32
Digitalbazaar » Forge » Version: 0.2.33

cpe:2.3:a:digitalbazaar:forge:0.2.33
Digitalbazaar » Forge » Version: 0.2.34

cpe:2.3:a:digitalbazaar:forge:0.2.34
Digitalbazaar » Forge » Version: 0.2.35

cpe:2.3:a:digitalbazaar:forge:0.2.35
Digitalbazaar » Forge » Version: 0.2.36

cpe:2.3:a:digitalbazaar:forge:0.2.36
Digitalbazaar » Forge » Version: 0.2.37

cpe:2.3:a:digitalbazaar:forge:0.2.37
Digitalbazaar » Forge » Version: 0.2.4

cpe:2.3:a:digitalbazaar:forge:0.2.4
Digitalbazaar » Forge » Version: 0.2.5

cpe:2.3:a:digitalbazaar:forge:0.2.5
Digitalbazaar » Forge » Version: 0.2.6

cpe:2.3:a:digitalbazaar:forge:0.2.6
Digitalbazaar » Forge » Version: 0.2.7

cpe:2.3:a:digitalbazaar:forge:0.2.7
Digitalbazaar » Forge » Version: 0.2.8

cpe:2.3:a:digitalbazaar:forge:0.2.8
Digitalbazaar » Forge » Version: 0.2.9

cpe:2.3:a:digitalbazaar:forge:0.2.9
Digitalbazaar » Forge » Version: 0.3.0

cpe:2.3:a:digitalbazaar:forge:0.3.0
Digitalbazaar » Forge » Version: 0.4.0

cpe:2.3:a:digitalbazaar:forge:0.4.0
Digitalbazaar » Forge » Version: 0.4.1

cpe:2.3:a:digitalbazaar:forge:0.4.1
Digitalbazaar » Forge » Version: 0.4.2

cpe:2.3:a:digitalbazaar:forge:0.4.2
Digitalbazaar » Forge » Version: 0.4.3

cpe:2.3:a:digitalbazaar:forge:0.4.3
Digitalbazaar » Forge » Version: 0.5.0

cpe:2.3:a:digitalbazaar:forge:0.5.0
Digitalbazaar » Forge » Version: 0.5.1

cpe:2.3:a:digitalbazaar:forge:0.5.1
Digitalbazaar » Forge » Version: 0.5.2

cpe:2.3:a:digitalbazaar:forge:0.5.2
Digitalbazaar » Forge » Version: 0.5.3

cpe:2.3:a:digitalbazaar:forge:0.5.3
Digitalbazaar » Forge » Version: 0.5.4

cpe:2.3:a:digitalbazaar:forge:0.5.4
Digitalbazaar » Forge » Version: 0.5.5

cpe:2.3:a:digitalbazaar:forge:0.5.5
Digitalbazaar » Forge » Version: 0.6.0

cpe:2.3:a:digitalbazaar:forge:0.6.0
Digitalbazaar » Forge » Version: 0.6.1

cpe:2.3:a:digitalbazaar:forge:0.6.1
Digitalbazaar » Forge » Version: 0.6.10

cpe:2.3:a:digitalbazaar:forge:0.6.10
Digitalbazaar » Forge » Version: 0.6.11

cpe:2.3:a:digitalbazaar:forge:0.6.11
Digitalbazaar » Forge » Version: 0.6.12

cpe:2.3:a:digitalbazaar:forge:0.6.12
Digitalbazaar » Forge » Version: 0.6.13

cpe:2.3:a:digitalbazaar:forge:0.6.13
Digitalbazaar » Forge » Version: 0.6.14

cpe:2.3:a:digitalbazaar:forge:0.6.14
Digitalbazaar » Forge » Version: 0.6.15

cpe:2.3:a:digitalbazaar:forge:0.6.15
Digitalbazaar » Forge » Version: 0.6.16

cpe:2.3:a:digitalbazaar:forge:0.6.16
Digitalbazaar » Forge » Version: 0.6.17

cpe:2.3:a:digitalbazaar:forge:0.6.17
Digitalbazaar » Forge » Version: 0.6.18

cpe:2.3:a:digitalbazaar:forge:0.6.18
Digitalbazaar » Forge » Version: 0.6.19

cpe:2.3:a:digitalbazaar:forge:0.6.19
Digitalbazaar » Forge » Version: 0.6.2

cpe:2.3:a:digitalbazaar:forge:0.6.2
Digitalbazaar » Forge » Version: 0.6.20

cpe:2.3:a:digitalbazaar:forge:0.6.20
Digitalbazaar » Forge » Version: 0.6.21

cpe:2.3:a:digitalbazaar:forge:0.6.21
Digitalbazaar » Forge » Version: 0.6.22

cpe:2.3:a:digitalbazaar:forge:0.6.22
Digitalbazaar » Forge » Version: 0.6.23

cpe:2.3:a:digitalbazaar:forge:0.6.23
Digitalbazaar » Forge » Version: 0.6.24

cpe:2.3:a:digitalbazaar:forge:0.6.24
Digitalbazaar » Forge » Version: 0.6.25

cpe:2.3:a:digitalbazaar:forge:0.6.25
Digitalbazaar » Forge » Version: 0.6.26

cpe:2.3:a:digitalbazaar:forge:0.6.26
Digitalbazaar » Forge » Version: 0.6.27

cpe:2.3:a:digitalbazaar:forge:0.6.27
Digitalbazaar » Forge » Version: 0.6.28

cpe:2.3:a:digitalbazaar:forge:0.6.28
Digitalbazaar » Forge » Version: 0.6.29

cpe:2.3:a:digitalbazaar:forge:0.6.29
Digitalbazaar » Forge » Version: 0.6.3

cpe:2.3:a:digitalbazaar:forge:0.6.3
Digitalbazaar » Forge » Version: 0.6.30

cpe:2.3:a:digitalbazaar:forge:0.6.30
Digitalbazaar » Forge » Version: 0.6.31

cpe:2.3:a:digitalbazaar:forge:0.6.31
Digitalbazaar » Forge » Version: 0.6.32

cpe:2.3:a:digitalbazaar:forge:0.6.32
Digitalbazaar » Forge » Version: 0.6.33

cpe:2.3:a:digitalbazaar:forge:0.6.33
Digitalbazaar » Forge » Version: 0.6.34

cpe:2.3:a:digitalbazaar:forge:0.6.34
Digitalbazaar » Forge » Version: 0.6.35

cpe:2.3:a:digitalbazaar:forge:0.6.35
Digitalbazaar » Forge » Version: 0.6.37

cpe:2.3:a:digitalbazaar:forge:0.6.37
Digitalbazaar » Forge » Version: 0.6.38

cpe:2.3:a:digitalbazaar:forge:0.6.38
Digitalbazaar » Forge » Version: 0.6.39

cpe:2.3:a:digitalbazaar:forge:0.6.39
Digitalbazaar » Forge » Version: 0.6.4

cpe:2.3:a:digitalbazaar:forge:0.6.4
Digitalbazaar » Forge » Version: 0.6.40

cpe:2.3:a:digitalbazaar:forge:0.6.40
Digitalbazaar » Forge » Version: 0.6.41

cpe:2.3:a:digitalbazaar:forge:0.6.41
Digitalbazaar » Forge » Version: 0.6.42

cpe:2.3:a:digitalbazaar:forge:0.6.42
Digitalbazaar » Forge » Version: 0.6.43

cpe:2.3:a:digitalbazaar:forge:0.6.43
Digitalbazaar » Forge » Version: 0.6.44

cpe:2.3:a:digitalbazaar:forge:0.6.44
Digitalbazaar » Forge » Version: 0.6.45

cpe:2.3:a:digitalbazaar:forge:0.6.45
Digitalbazaar » Forge » Version: 0.6.46

cpe:2.3:a:digitalbazaar:forge:0.6.46
Digitalbazaar » Forge » Version: 0.6.47

cpe:2.3:a:digitalbazaar:forge:0.6.47
Digitalbazaar » Forge » Version: 0.6.48

cpe:2.3:a:digitalbazaar:forge:0.6.48
Digitalbazaar » Forge » Version: 0.6.49

cpe:2.3:a:digitalbazaar:forge:0.6.49
Digitalbazaar » Forge » Version: 0.6.5

cpe:2.3:a:digitalbazaar:forge:0.6.5
Digitalbazaar » Forge » Version: 0.6.6

cpe:2.3:a:digitalbazaar:forge:0.6.6
Digitalbazaar » Forge » Version: 0.6.7

cpe:2.3:a:digitalbazaar:forge:0.6.7
Digitalbazaar » Forge » Version: 0.6.8

cpe:2.3:a:digitalbazaar:forge:0.6.8
Digitalbazaar » Forge » Version: 0.6.9

cpe:2.3:a:digitalbazaar:forge:0.6.9
Digitalbazaar » Forge » Version: 0.7.0

cpe:2.3:a:digitalbazaar:forge:0.7.0
Digitalbazaar » Forge » Version: 0.7.1

cpe:2.3:a:digitalbazaar:forge:0.7.1
Digitalbazaar » Forge » Version: 0.7.2

cpe:2.3:a:digitalbazaar:forge:0.7.2
Digitalbazaar » Forge » Version: 0.7.3

cpe:2.3:a:digitalbazaar:forge:0.7.3
Digitalbazaar » Forge » Version: 0.7.4

cpe:2.3:a:digitalbazaar:forge:0.7.4
Digitalbazaar » Forge » Version: 0.7.5

cpe:2.3:a:digitalbazaar:forge:0.7.5
Digitalbazaar » Forge » Version: 0.7.6

cpe:2.3:a:digitalbazaar:forge:0.7.6
Digitalbazaar » Forge » Version: 0.8.0

cpe:2.3:a:digitalbazaar:forge:0.8.0
Digitalbazaar » Forge » Version: 0.8.1

cpe:2.3:a:digitalbazaar:forge:0.8.1
Digitalbazaar » Forge » Version: 0.8.2

cpe:2.3:a:digitalbazaar:forge:0.8.2
Digitalbazaar » Forge » Version: 0.8.3

cpe:2.3:a:digitalbazaar:forge:0.8.3
Digitalbazaar » Forge » Version: 0.8.4

cpe:2.3:a:digitalbazaar:forge:0.8.4
Digitalbazaar » Forge » Version: 0.8.5

cpe:2.3:a:digitalbazaar:forge:0.8.5
Digitalbazaar » Forge » Version: 0.9.0

cpe:2.3:a:digitalbazaar:forge:0.9.0
Digitalbazaar » Forge » Version: 0.9.1

cpe:2.3:a:digitalbazaar:forge:0.9.1
Digitalbazaar » Forge » Version: 0.9.2

cpe:2.3:a:digitalbazaar:forge:0.9.2
Digitalbazaar » Forge » Version: 1.0.0

cpe:2.3:a:digitalbazaar:forge:1.0.0
Digitalbazaar » Forge » Version: 1.1.0

cpe:2.3:a:digitalbazaar:forge:1.1.0
Digitalbazaar » Forge » Version: 1.2.0

cpe:2.3:a:digitalbazaar:forge:1.2.0
Digitalbazaar » Forge » Version: 1.2.1

cpe:2.3:a:digitalbazaar:forge:1.2.1
Digitalbazaar » Forge » Version: 1.3.0

cpe:2.3:a:digitalbazaar:forge:1.3.0
Digitalbazaar » Forge » Version: 1.3.1

cpe:2.3:a:digitalbazaar:forge:1.3.1
Digitalbazaar » Forge » Version: 1.3.2

cpe:2.3:a:digitalbazaar:forge:1.3.2
Digitalbazaar » Forge » Version: 1.3.3

cpe:2.3:a:digitalbazaar:forge:1.3.3
Digitalbazaar » Forge » Version: 1.4.0

cpe:2.3:a:digitalbazaar:forge:1.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2026-119189

Products

Pricing

Contact Us