Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used BigInteger.prototype.modInverse(), bnModInverse(), lib/jsbn.js, RSA public exponent e to process the relevant input or security decision. node-forge's bundled jsbn implementation entered an infinite loop when BigInteger.prototype.modInverse() received a negative value or modulus. An attacker who could control the RSA public exponent passed to key generation, or a direct modInverse() operand, could block the Node.js event loop at full CPU. Parsed DER, PEM, JWK, PKCS#12, X.509, and TLS values are unsigned and cannot trigger this issue. This issue is fixed in version 1.4.1.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior
    to 1.4.1, the affected implementation used BigInteger.prototype.modInverse(), bnModInverse(), lib/jsbn.js,
    RSA public exponent e to process the relevant input or security decision. node-forge's bundled jsbn
    implementation entered an infinite loop when BigInteger.prototype.modInverse() received a negative value
    or modulus. An attacker who could control the RSA public exponent passed to key generation, or a direct
    modInverse() operand, could block the Node.js event loop at full CPU. Parsed DER, PEM, JWK, PKCS#12,
    X.509, and TLS values are unsigned and cannot trigger this issue. This issue is fixed in version 1.4.1.
    (CVE-2026-118781)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior     to 1.4.1, the affected implementation used BigInteger.prototype.modInverse(), bnModInverse(), lib/jsbn.js,     RSA public exponent e to process the relevant input or security decision. node-forge's bundled jsbn     implementation entered an infinite loop when BigInteger.prototype.modInverse() received a negative value     or modulus. An attacker who could control the RSA public exponent passed to key generation, or a direct     modInverse() operand, could block the Node.js event loop at full CPU. Parsed DER, PEM, JWK, PKCS#12,     X.509, and TLS values are unsigned and cannot trigger this issue. This issue is fixed in version 1.4.1.
    (CVE-2026-118781)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
478125	Chainguard: kubeflow-centraldashboard: security update to 2.0.0-r8	Tenable Cloud Security	Chainguard Local Security Checks	Local	low
478125	Chainguard: kubeflow-centraldashboard: security update to 2.0.0-r8	Tenable Self-Hosted Container Security	Chainguard Local Security Checks	Local	low
478090	SCA: security update for node-forge (GHSA-h6cr-wjv9-3cpp)	Tenable Cloud Security	SCA Checks	Local	low
478090	SCA: security update for node-forge (GHSA-h6cr-wjv9-3cpp)	Tenable Self-Hosted Container Security	SCA Checks	Local	low
374483	Linux Distros Unpatched Vulnerability : CVE-2026-118781	Nessus	Misc.	Local	low

Detections

Analytics

CVE-2026-118781

low

Tenable Plugins

low

low

low

low

low