`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,714 Dependabot PRs

Latest PR:
21 days ago

Unique Repositories:
4,650 repositories

Unique Repos (30 days):
14 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 4 months ago • updated 24 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

GHSA-5m6q-g25r-mvwx CVE-2026-33891 HIGH published 4 months ago • updated 8 days ago

## Summary A Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInteger.modInverse() functio...

View all 15 advisories

Recent PRs

RSS Feed

Bump the npm_and_yarn group across 1 directory with 21 updates

steve57000/portfolio #6

1.3.1 → 1.4.0 Minor PR

Closed 21 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

thec1rclehost123-cmd/thec1rcle #68

1.3.3 → 1.4.0 Minor PR

Open 26 days ago 2 comments

chore: bump the npm_and_yarn group across 1 directory with 3 updates

sigma7863/docsify #11

1.3.1 → 1.4.0 Minor PR

Open about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 26 updates

batuhan-basoglu/Hospital-Management-System #128

1.3.1 → 1.4.0 Minor PR

Closed about 1 month ago 1 comment

Bump node-forge from 1.3.1 to 1.4.0 in /pdf-verification-service-frontend

AnubhavDash/pdf-verify #2

1.3.1 → 1.4.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the gutenberg-security group across 1 directory with 12 updates

brainstormforce/sureforms-public #105

1.3.3 → 1.4.0 Minor PR

Open about 1 month ago 2 comments

frontend(deps): bump the npm_and_yarn group across 1 directory with 7 updates

imran31415/agentlog #178

1.3.1 → 1.4.0 Minor PR

Open about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

Kaairofelipe/safe-chain #1

1.3.2 → 1.4.0 Minor PR

Closed about 1 month ago 1 comment

Bump the npm_and_yarn group across 2 directories with 8 updates

Dev-moe-kyawaung/expo #4

1.3.3 → 1.4.0 Minor PR

Closed about 1 month ago 3 comments

Bump the npm_and_yarn group across 2 directories with 20 updates

lisaross/gatsby #1

0.7.5 → 0.7.6 Patch PR

Closed about 1 month ago 2 comments

Bump the npm_and_yarn group across 1 directory with 8 updates

georgyo/ipfs-hls #21

1.3.3 → 1.4.0 Minor PR

Closed about 2 months ago 2 comments

Bump node-forge from 1.3.1 to 1.4.0

allerion-systems/cloudflare-docs #3

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

figureskatingtools/fs-judgepapers #11

1.3.3 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump node-forge from 1.3.3 to 1.4.0 in /python/agents/retail-ai-location-strategy/app/frontend

badal-io/adk-agents #6

1.3.3 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 33 updates

HiromiShikata/landy-react-template #5

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 5 directories with 23 updates

suitenumerique/meet #1402

1.3.3 → 1.4.0 Minor PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 32 updates

geolonia/style-compare #8

1.2.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

Bump node-forge from 1.3.1 to 1.4.0

rdreed21/morsebrowser_dev #22

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 2 comments

Bump node-forge from 1.3.1 to 1.4.0

dlep17/fsl-index #29

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 32 updates

Cdult/awesome-compose-4d7b8c3c #1

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 8 updates

lemonbot569-bot/expo #1

1.3.3 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 23 updates

suitenumerique/meet #1371

1.3.3 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 21 updates

EmilynnJ/twilio-video-app-react #1

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 4 comments

Bump the npm_and_yarn group across 3 directories with 14 updates

Cyptopimpinainteazy/remix-project #1

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 18 updates

gagneet/firefly-iii #12

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 9 directories with 14 updates

stevewithington/gcp-generative-ai #5

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 16 directories with 18 updates

ahump20/socket.io #30

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

gagneet/firefly-iii #11

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 25 updates

sam1am/auth-boilerplate #1

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 28 updates

stevewithington/daytona #2

1.3.2 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

theinsightcentre/generative-ai-google #9

1.3.1 → 1.4.0 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.4.0

YoutacRandS-VA/webpack-cli #11

1.3.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 31 updates

muhammadali1995/muck-23 #6

1.2.1 → 1.4.0 Minor PR

Open about 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 13 updates

HarleyCoops/ai #1

1.3.1 → 1.4.0 Minor PR

Open 2 months ago 2 comments

Bump node-forge from 1.3.3 to 1.4.0 in /side-projects/firebase/functions in the npm_and_yarn group across 1 directory

makerpars/android-multi-app-framework-public #1

1.3.3 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 21 updates

rorymclaughlin432/admin-dashboard-charts #2

1.3.3 → 1.4.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 13 directories with 13 updates

loveyou001/genkit #67

1.3.1 → 1.4.0 Minor PR

Open 2 months ago 9 comments

Bump the npm_and_yarn group across 5 directories with 7 updates

jinhua115/workers-sdk #16

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 22 updates

huynguyenjv/VN-Law #33

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 8 updates

HarleyCoops/workflow-use #7

1.3.1 → 1.4.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 18 updates

commercetools-demo/contentools #55

1.3.3 → 1.4.0 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 4 directories with 7 updates

rshan1515/workers-sdk #22

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

tcpipuk/maubot #32

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 19 updates

DesarrolloORT/ngx-whats-new #68

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

fix: bump the npm-security group across 1 directory with 20 updates

janbiasi/rollup-plugin-sbom #313

1.3.3 → 1.4.0 Minor PR

Closed 2 months ago 2 comments

Bump the npm_and_yarn group across 15 directories with 24 updates

1042422227/react #9

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 27 updates

Kaairofelipe/ai-lab-recipes #2

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the npm_and_yarn group across 5 directories with 17 updates

alejandrocuba/angular #3

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

Bump node-forge from 1.3.1 to 1.4.0

ediheid/reverberation-frontend #41

1.3.1 → 1.4.0 Minor PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 19 updates

atze1210/aa-sdk #277

1.3.1 → 1.4.0 Minor PR

Open 2 months ago 2 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` over 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,972 (52.0%)

Merged 58 (1.0%)

Closed 2,660 (46.6%)

PR Types

Major 1,167 (20.4%)

Minor 1,544 (27.0%)

Patch 2,926 (51.2%)

Removal 43 (0.8%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

Improper Verification of Cryptographic Signature in node-forge

node-forge is vulnerable to ASN.1 OID Integer Truncation

node-forge has ASN.1 Unbounded Recursion

Recent PRs

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`