Bug 2563661 (CVE-2026-119188) - CVE-2026-119188 node-forge: node-forge: Denial of Service via interleaved record during fragmented TLS handshake
Summary: CVE-2026-119188 node-forge: node-forge: Denial of Service via interleaved rec...
Keywords:
Status: NEW
Alias: CVE-2026-119188
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-29 19:41 UTC by OSIDB Bzimport
Modified: 2026-11-03 08:30 UTC (History)
62 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-29 19:41:05 UTC 
Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection(), fragmented handshake message, interleaved record to process the relevant input or security decision. node-forge continued processing after a TLS record of another content type interrupted a fragmented handshake message. A remote peer could trigger an uncaught TypeError in process(), causing the connection or hosting process to fail. This issue is fixed in version 1.4.1.
Note You need to log in before you can comment on or make changes to this bug.