CVE-2026-85393: node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
(updated )
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.
References
- github.com/advisories/GHSA-86w9-cpqp-85rv
- github.com/advisories/GHSA-ppp5-5v6c-4jwp
- github.com/digitalbazaar/forge/blob/v1.4.0/lib/asn1.js
- github.com/digitalbazaar/forge/blob/v1.4.0/lib/rsa.js
- github.com/digitalbazaar/forge/issues/1149
- github.com/digitalbazaar/forge/pull/1152
- nvd.nist.gov/vuln/detail/CVE-2026-85393
- www.vulncheck.com/advisories/node-forge-through-1.4.0-rsa-pkcs-1-1.5-signature-forgery-via-nested-digestalgorithm-padding
Code Behaviors & Features
Detect and mitigate CVE-2026-85393 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →