CVE-2026-118781 | DigitalBazaar forge up to 1.4.0 RSA Key Generation lib/jsbn.js BigInteger.prototype.modInverse modulus infinite loop

October 29, 2026 Yanac

A vulnerability marked as problematic has been reported in DigitalBazaar forge up to 1.4.0. This affects the function BigInteger.prototype.modInverse of the file lib/jsbn.js of the component RSA Key Generation. Performing a manipulation of the argument modulus results in infinite loop.

This vulnerability was named CVE-2026-118781. The attack needs to be approached locally. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More