ETK-2026-2729Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-2729",
  "cve_id": null,
  "display_id": "ETK-2026-2729",
  "ghsa_id": "GHSA-7wch-p9px-956x",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Regular expression denial of service in node-forge PEM parsing",
  "summary": "node-forge versions before 1.4.1 can consume excessive processing time while decoding malformed PEM content. An unauthenticated attacker able to submit PEM text to an application can delay the Node.js event loop and disrupt service.",
  "mitigation": "Upgrade node-forge to version 1.4.1 or later. Until upgrades are complete, reject untrusted PEM inputs above a small size limit before passing them to node-forge; this reduces, but does not eliminate, exposure.",
  "vendor": "npm",
  "product": "npm:node-forge",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 1.4.0"
      ],
      "ecosystem": "npm",
      "fixed_versions": [
        "1.4.1"
      ],
      "package_name": "node-forge",
      "purl": "pkg:npm/node-forge"
    }
  ],
  "cwes": [
    400
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 15.996750433333334,
  "t0_at": null,
  "signals": {
    "trigger_signal": {
      "at": "2026-10-27T05:09:21+00:00",
      "days": -0.10914398980324073,
      "is_lower_bound": true,
      "measured_at": "2026-10-27T07:46:31.076358+00:00",
      "url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-7wch-p9px-956x"
    }
  }
}