`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,704 Dependabot PRs

Latest PR:
1 day ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
42 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 16 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 28 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 3 directories with 5 updates

ummitsmerogers-droid/docusaurus #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.3

HyunmoAhn/hyunmoahn.github.io #70

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 5 updates

Pricesenz/nextjs-cursor-boilerplate #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

ggcaram/Contador-en-lista-y-condicional #18

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 38 updates

batuhan-basoglu/Hospital-Management-System #75

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

fix(deps): bump the npm_and_yarn group across 1 directory with 16 updates

ulab-uiuc/research-town #1480

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates

ulab-uiuc/research-town #1479

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates

jburesi/undercolor #3

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 11 updates

codeharborhub/codeharborhub.github.io #4958

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 11 updates

dawidolko/SmartRecommender-Project-Django-React #5

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.3

Hari-hara-sudan/Mock_interview_agent #2

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

andy-backup/explorer.chain.moe #27

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.3 in the npm_and_yarn group across 1 directory

plastikaweb/plastikspace #864

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 2 comments

Bump the npm_and_yarn group across 2 directories with 21 updates

SocioProphet/socioprophet #207

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.0 to 1.3.3

vinijmoura/skills-deploy-to-azure #8

1.3.0 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

gabyse1/air-pollution #17

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.3

kmcurry/kevincurry.us #14

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 32 updates

maxanastasio/Ghost-porphyrogenis-org #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

Michaelhughes2500/studio #8

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the dependencies group across 1 directory with 40 updates

streamr-dev/network #3382

1.3.2 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.3

sovouthea1111/volleyball-site #5

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

Moesera/holidaze #61

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 12 updates

philh4420/RecipePal #1

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

bump node-forge from 1.3.1 to 1.3.3

LelandParker/AFFiNE #2

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

ukmihiran/angularWeatherApp #7

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.3

JairajJangle/react-native-checkbox #12

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

theGunner295/seerr #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 14 updates

seanclancy/universalviewer #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

GlacierEQ/langchain #2

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 18 updates

Wbaker7702/stellar-docs #1

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 9 updates

MichaelPaulukonis/job-posting-analyzer #8

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

build(deps-dev): Bump node-forge from 1.3.1 to 1.3.3

udistrital/verificacion_firma_digital_mf #24

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 39 updates

batuhan-basoglu/Hospital-Management-System #74

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3 in /frontend

AdrianDiaz24/DAW2-Proyecto-Grupo-7 #144

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.3

Frigear-nu/nuxt-frigear-nu #161

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 3 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.3 in /wasm/python in the npm_and_yarn group across 1 directory

chatchanit6227-flothru/apps-script-samples #4

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.3

Septikai/Septikai-Website #35

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

LiveSplit/LiveSplitOne #1115

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3 in /template/frontend

mork-optimization/mork #309

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 6 directories with 44 updates

Abuchtela/gitpod #472

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3 in /shopping-cart

SanjitSG/50-days-50-Projects #3

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 7 comments

Bump the npm_and_yarn group across 1 directory with 12 updates

michaelrapoport/IdeaFlow #15

1.3.1 → 1.3.3 Patch PR

Open 4 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

korneliagruszka/leszkomania #134

1.3.1 → 1.3.3 Patch PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 19 updates

kushmanmb-org/cdp-sdk-sample-apps #1

1.3.1 → 1.3.3 Patch PR

Closed 5 months ago 2 comments

build(deps): bump the npm_and_yarn group across 2 directories with 11 updates

Dargon789/aa-sdk #91

1.3.1 → 1.3.3 Patch PR

Closed 5 months ago 4 comments

Bump the npm_and_yarn group across 1 directory with 31 updates

Sin-Estres-dev/canvas #1

1.3.0 → 1.3.3 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 19 updates

Wbaker7702/onchainkit #1

1.3.1 → 1.3.3 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 20 updates

Sin-Estres-dev/onchainkit #1

1.3.1 → 1.3.3 Patch PR

Open 5 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

tkrapp/tkrapp.github.io #52

1.3.1 → 1.3.3 Patch PR

Closed 5 months ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 17 updates

GlacierEQ/authentik #42

1.3.1 → 1.3.3 Patch PR

Open 5 months ago 5 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,656 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,536 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`