CVE-2026-85393
Fixed in a distro release EPSS <1%CVSS 7.5
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification. Attackers can embed garbage bytes inside the DigestAlgorithm sequence to forge valid signatures for arbitrary messages using low-exponent RSA keys. This is an incomplete fix for CVE-2026-33894.
Products: digitalbazaar forge
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| npm | node-forge | no fix |
| npm | node-forge | 1.4.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | arangodb-3.11 | no fix |
| Chainguard | arangodb-3.12 | no fix |
| Chainguard | commercial-gitlab-rails-ee-19.1 | 19.1.7-r3 |
| Chainguard | commercial-gitlab-rails-ee-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-19.3 | 19.3.3-r1 |
| Chainguard | commercial-gitlab-rails-ee-19.4 | 19.4.1-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.1 | 19.1.9-r0 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.2 | 19.2.7-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.3 | 19.3.3-r1 |
| Chainguard | commercial-gitlab-rails-ee-fips-19.4 | 19.4.1-r1 |
| Chainguard | dotstatsuite-supercore | no fix |
| Chainguard | gitlab-rails-ce-18.10 | no fix |
| Chainguard | gitlab-rails-ce-18.11 | 18.11.13-r0 |
| Chainguard | gitlab-rails-ce-18.8 | no fix |
| Chainguard | gitlab-rails-ce-18.9 | no fix |
| Chainguard | gitlab-rails-ce-19.0 | 19.0.10-r0 |
| Chainguard | gitlab-rails-ce-19.1 | 19.1.9-r0 |
| Chainguard | gitlab-rails-ce-19.2 | no fix |
| Chainguard | gitlab-rails-ce-19.3 | 19.3.6-r0 |
| Chainguard | gitlab-rails-ce-19.4 | no fix |
| Chainguard | gitlab-rails-ce-19.5 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.10 | 18.10.8-r8 |
| Chainguard | gitlab-rails-ce-fips-18.11 | 18.11.12-r2 |
| Chainguard | gitlab-rails-ce-fips-18.8 | no fix |
| Chainguard | gitlab-rails-ce-fips-18.9 | 18.9.8-r8 |
| Chainguard | gitlab-rails-ce-fips-19.0 | 19.0.9-r3 |
| Chainguard | gitlab-rails-ce-fips-19.1 | 19.1.8-r9 |
| Chainguard | gitlab-rails-ce-fips-19.2 | no fix |
| Chainguard | gitlab-rails-ce-fips-19.3 | 19.3.3-r8 |
| Chainguard | gitlab-rails-ce-fips-19.4 | 19.4.1-r8 |
| Chainguard | jitsucom-jitsu-console | no fix |
| Chainguard | kibana-8.19 | no fix |
| Chainguard | kibana-8.19-bitnami | no fix |
| Chainguard | kibana-9.2 | no fix |
| Chainguard | kibana-9.3 | no fix |
| Chainguard | kibana-9.4 | no fix |
| Chainguard | kibana-9.5 | no fix |
| Chainguard | kubeflow-centraldashboard | no fix |
| Chainguard | kubeflow-pipelines-frontend | no fix |
| Chainguard | opensearch-dashboards-2 | no fix |
| Chainguard | opensearch-dashboards-2-fips | no fix |
| Chainguard | opensearch-dashboards-3 | no fix |
| Chainguard | opensearch-dashboards-3-fips | no fix |
| Chainguard | wazuh-dashboard | no fix |
| Chainguard | wazuh-dashboard-fips | no fix |
| Chainguard | wazuh-dashboard-security-plugin | no fix |
| Chainguard | wazuh-dashboard-security-plugin-fips | no fix |
| Ubuntu 20.04 LTS | node-node-forge | no fix |
| Ubuntu 22.04 LTS | node-node-forge | no fix |
| Wolfi | jitsucom-jitsu-console | no fix |
| Wolfi | kubeflow-centraldashboard | no fix |
| Wolfi | kubeflow-pipelines-frontend | no fix |
| Wolfi | opensearch-dashboards-3 | no fix |