RobinTail / express-zod-api / 41680460298

100%

push

github

chore(deps): update dependency node-forge to v1.4.1 (#3792)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [node-forge](https://redirect.github.com/digitalbazaar/forge) |
[`1.4.0` →
`1.4.1`](https://renovatebot.com/diffs/npm/node-forge/1.4.0/1.4.1) |
![age](https://developer.mend.io/api/mc/badges/age/npm/node-forge/1.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/node-forge/1.4.0/1.4.1?slim=true)
|

---

### Release Notes

<details>
<summary>digitalbazaar/forge (node-forge)</summary>

###
[`v1.4.1`](https://redirect.github.com/digitalbazaar/forge/blob/HEAD/CHANGELOG.md#141---2026-10-27)

[Compare
Source](https://redirect.github.com/digitalbazaar/forge/compare/v1.4.0...v1.4.1)

##### Notes

- This release involved coordinating many security reports from many
groups,
people, and robots over too long period of time. Thank you for your
reports
  and patience.
- Claude Code was used to help organize, track, untangle, merge, test,
validate, fix, and improve it all. Further verification of fixes would
be
  welcome.
- Tracking credits was challenging for some issues due to multiple email
and
GitHub reports, incomplete contact details, or combining of partial
reports
and fixes. Please let us know if there are credits changes needed here
or in
  advisory data.

##### Security

- **HIGH**: Signature forgery in RSA-PKCS due to ASN.1 extra field in
  DigestAlgorithm.
- RSASSA [PKCS#1](https://redirect.github.com/PKCS/forge/issues/1) v1.5
signature verification accepts forged signatures for low
public exponent keys (e=3). The fix for CVE-2026-33894 only checked the
element count of the outer DigestInfo. Attackers can add "garbage"
elements
    inside the nested DigestAlgorithm SEQUENCE in order to construct a
signature that passes verification, enabling Bleichenbacher style
... (continued)

1184 of 1233 branches covered (96.03%)

1698 of 1698 relevant lines covered (100.0%)

557.61 hits per line