CVE-2026-118776 | Digital Bazaar forge up to 1.4.0 PKCS#7 Padding decipher.finish input validation

October 29, 2026 Yanac

A vulnerability was found in Digital Bazaar forge up to 1.4.0. It has been declared as problematic. This vulnerability affects the function decipher.finish of the component PKCS#7 Padding. Executing a manipulation can lead to improper input validation.

This vulnerability appears as CVE-2026-118776. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More