CVE-2026-119188: Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message

Severity: high. ### Summary A connection created with `forge.tls.createConnection()` throws an uncaught `TypeError` from `process()` when it receives a record of another content type while waiting for the rest of a handshake message that was split across records. A peer can trigger this with 18 bytes before the ha

Читать первоисточник →