CVE-2026-118777 | digitalbazaar forge up to 1.4.0 forge.http prototype pollution

October 29, 2026 Yanac

A vulnerability classified as critical was found in digitalbazaar forge up to 1.4.0. Affected by this vulnerability is an unknown functionality of the component forge.http. The manipulation results in improperly controlled modification of object prototype attributes.

This vulnerability is identified as CVE-2026-118777. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More