Threats tagged 'ghsa-h46v-rmh6-fq4f'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.9	CVE-2026-119189node-forge · Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage Medium5.92026-11-10GCVE DatabaseCVE-2026-119189 A vulnerability in node-forge's pki.verifyCertificateChain() function causes it to ignore the pathLenConstraint in CA certificates that lack a keyUsage extension. This allows certificate chains with more intermediate CAs than allowed by the pathLenConstraint to be accepted. The issue is fixed in node-forge 1.4.1. Report on CVE-2026-119189 Vulnerability CWE-295 #ghsa-h46v-rmh6-fq4f #npm	GCVE Database	2026-11-10

Page 1 of 1