CVE-2026-118776: Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption

November 10, 2026

decipher.finish() in CBC and ECB mode accepted malformed PKCS#7 padding: only the last byte was checked, against a limit of four blocks, so mismatched padding bytes, a zero count and oversized counts were accepted and up to four blocks of plaintext could be silently removed. Fixed in node-forge 1.4.1.

References

github.com/advisories/GHSA-2vgq-wchc-25w7
github.com/digitalbazaar/forge/commit/81774ff99e2da64aec9a43591df45a360040c136
github.com/digitalbazaar/forge/releases/tag/v1.4.1
github.com/digitalbazaar/forge/security/advisories/GHSA-2vgq-wchc-25w7
nvd.nist.gov/vuln/detail/CVE-2026-118776

Code Behaviors & Features

Detect and mitigate CVE-2026-118776 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →