<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: digitalbazaar-forge</title><description>Every new CVE for digitalbazaar-forge.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119191: Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer</title><link>https://agentprime.io/advisories/CVE-2026-119191/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119191/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 19:26:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-119189: Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage</title><link>https://agentprime.io/advisories/CVE-2026-119189/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119189/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 19:23:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-118776: Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption</title><link>https://agentprime.io/advisories/CVE-2026-118776/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118776/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 18:37:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-118774: Forge: Certificate signature verified with the issuer&apos;s RSA signature scheme</title><link>https://agentprime.io/advisories/CVE-2026-118774/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-118774/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 18:33:46 GMT</pubDate><category>CVE</category></item></channel></rss>