CVE-2026-118782: Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count

October 30, 2026

forge.pkcs12.pkcs12FromAsn1() accepts a PKCS#12 MAC iteration count of zero (or less) from the input, and the PKCS#12 key derivation function then returns a constant key that does not depend on the password or salt. An attacker who does not know the password can modify a PKCS#12/PFX file and compute a MAC that verifies with any password; PKCS#12 PBE-encrypted private keys prepared the same way decrypt with any password. Fixed in node-forge 1.4.1.

References

github.com/advisories/GHSA-jc66-7q78-782g
github.com/digitalbazaar/forge/commit/d9584aa56824972858366d5187b3d29e46bf3656
github.com/digitalbazaar/forge/releases/tag/v1.4.1
github.com/digitalbazaar/forge/security/advisories/GHSA-jc66-7q78-782g
nvd.nist.gov/vuln/detail/CVE-2026-118782

Code Behaviors & Features

Detect and mitigate CVE-2026-118782 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →