Fluid Attacks Database

Description

node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version
npm	node-forge	>=0 <=1.4.0

Aliases

1. CVE-2026-853932. NVD-2026-853933. OSV-2026-853934. GHSA-ppp5-5v6c-4jwp5. GCVE-2026-85393

References

1. https://github.com/digitalbazaar/forge/issues/11492. https://github.com/digitalbazaar/forge/pull/11523. https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js4. https://github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js5. https://www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.