node-forge: node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements (high). GHSA-86w9-cpqp-85rv, CVE-2026-33894, CVE-2026-85393, GHSA-ppp5-5v6c-4jwp.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?