UBUNTU-CVE-2026-118777

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-118777

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-118777.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-118777

Upstream

CVE-2026-118777

Published

2026-10-30T00:00:00Z

Modified

2026-10-31T03:30:04Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L CVSS Calculator
Ubuntu - medium

Summary

[none]

Details

Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the forge.http client stored cookie names and paths from Set-Cookie response headers in ordinary JavaScript objects. A malicious server could use the cookie name proto so that the attacker-controlled cookie path was written as a property on Object.prototype, or use inherited names such as constructor to modify Object. An empty cookie value could use the removal path to delete an inherited Object.prototype property. Applications using forge.http directly or through forge.xhr are affected; applications that do not use forge.http are unaffected. This issue is fixed in version 1.4.1.

References

Affected packages

Ubuntu:20.04:LTS / node-node-forge

Package

Name: node-node-forge
Purl: pkg:deb/ubuntu/node-node-forge?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

0.*

0.8.5~dfsg-2

0.9.1~dfsg-1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "libjs-node-forge",
            "binary_version":  "0.9.1~dfsg-1"
        },
        {
            "binary_name":  "node-node-forge",
            "binary_version":  "0.9.1~dfsg-1"
        }
    ]
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-118777.json"

Ubuntu:22.04:LTS / node-node-forge