Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,704 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
42 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated about 14 hours ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 14 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated about 15 hours ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated about 15 hours ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated about 14 hours ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
fix(deps): bump the npm_and_yarn group across 1 directory with 14 updates

ulab-uiuc/research-town #1439

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 3 comments
ulab-uiuc
Bump the npm_and_yarn group across 2 directories with 9 updates

OurDotNetOrganization/RandomAPIApp #17

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
OurDotNetOrganization
chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

ulab-uiuc/research-town #1438

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
ulab-uiuc
chore(deps): bump the npm_and_yarn group across 1 directory with 7 updates

CaffeeLake/retina #21

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 4 comments
CaffeeLake
chore(deps): bump the npm_and_yarn group across 2 directories with 11 updates

thirdweb-dev/engine #929

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 4 comments
thirdweb-dev
Bump node-forge from 1.3.1 to 1.3.3

letsbuilda/archives.letsbuilda.dev #61

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
letsbuilda
chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

dynamic-framework/dynamic-react-base-template #115

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
dynamic-framework
build(deps): bump node-forge from 1.3.1 to 1.3.3 in /documentation

equinor/template-fastapi-react #386

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 6 comments
equinor
chore(deps): Bump node-forge from 1.3.1 to 1.3.3 in /userdocs

liquidmetal-dev/flintlock #1103

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 2 comments
liquidmetal-dev
chore(deps): bump the npm_and_yarn group across 2 directories with 5 updates

smeup/ketchup #2766

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
smeup
Bump the npm_and_yarn group across 1 directory with 4 updates

NethermindEth/docs #325

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
NethermindEth
chore(deps): bump the npm_and_yarn group across 1 directory with 5 updates

MetaMask/metamask-docs #2605

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
MetaMask
Bump the npm_and_yarn group across 1 directory with 6 updates

qgis/QGIS #64421

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 4 comments
qgis
Bump the ui group across 1 directory with 68 updates

jtagcat/teleport #127

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 2 comments
jtagcat
chore(deps): bump the ui group with 41 updates

sigtrap/teleport #3681

1.3.2 → 1.3.3 Patch PR
Open 6 months ago 2 comments
sigtrap
chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

cliztech/storefront-ui #1

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
cliztech
Bump node-forge from 1.3.1 to 1.3.3

Ecss11/rss-worker #2

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
Ecss11
Bump node-forge from 1.3.1 to 1.3.3 in the npm_and_yarn group across 1 directory

SolaneHub/DIM #2

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
SolaneHub
Bump node-forge from 1.3.1 to 1.3.3

Resgrid/BigBoard #71

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
Resgrid
Bump node-forge from 1.3.1 to 1.3.3 in /frontend

PiotrFedak/NBAVerse #78

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
PiotrFedak
Bump the npm_and_yarn group across 3 directories with 6 updates

bobbravo2/odh-dashboard #5

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 3 comments
bobbravo2
build(deps): bump node-forge from 1.3.1 to 1.3.3 in /widget

Rose2161/hub #387

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
Rose2161
Bump node-forge from 1.3.1 to 1.3.3 in /website in the npm_and_yarn group across 1 directory

beyond-the-cloud-dev/soql-lib #239

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
beyond-the-cloud-dev
chore(deps): bump the npm_and_yarn group across 34 directories with 15 updates

VisionaryArchitects/CopilotKit #3

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 5 comments
VisionaryArchitects
Bump the npm_and_yarn group across 7 directories with 5 updates

Dargon789/vercel #58

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 2 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 11 directories with 15 updates

beauNate/CopilotKit #1

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
beauNate
Bump the npm_and_yarn group across 4 directories with 26 updates

naywint3/social-app #1

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
naywint3
Bump the npm_and_yarn group across 6 directories with 29 updates

balajirajput96/generative-ai-docs #1

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 2 comments
balajirajput96
Upgrade: Bump the npm_and_yarn group across 2 directories with 24 updates

goodgollyholly/hint #3

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 2 comments
goodgollyholly
Bump node-forge from 1.3.1 to 1.3.3 in /frontend

dayj-code/Repl #85

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
dayj-code
Bump the npm_and_yarn group across 3 directories with 39 updates

Stbs0/part12-containers-applications #1

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
Stbs0
build(deps): bump the npm_and_yarn group across 20 directories with 6 updates

hashim21223445/angular #208

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 8 comments
hashim21223445
Bump the npm_and_yarn group across 1 directory with 19 updates

cisco-open/path-warden #31

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
cisco-open
chore(deps): bump node-forge from 1.3.1 to 1.3.3 in the npm_and_yarn group across 1 directory

ongunakaycom/Little-Lemon-newsletter-sign-up #14

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
ongunakaycom
Bump node-forge from 1.3.1 to 1.3.3 in /ui

mouseless/baked #414

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 2 comments
mouseless
Bump the npm_and_yarn group across 1 directory with 15 updates

Stbs0/Todo-List #1

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
Stbs0
deps(deps): Bump the production-dependencies group across 1 directory with 119 updates

bcdady/ride-more-org #47

1.3.2 → 1.3.3 Patch PR
Open 6 months ago 2 comments
bcdady
Bump the npm_and_yarn group across 2 directories with 37 updates

batuhan-basoglu/Hospital-Management-System #67

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
batuhan-basoglu
Bump the npm_and_yarn group across 1 directory with 26 updates

batuhan-basoglu/Kene-s-Cribs-Website #222

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
batuhan-basoglu
Bump the npm_and_yarn group across 1 directory with 6 updates

khulnasoft/gpt4cli #54

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
khulnasoft
Bump node-forge from 1.3.1 to 1.3.3 in /projects/project0masjid/client-app-v2/masjidma

mh453Uol/cs50-web #179

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 3 comments
mh453Uol
Bump node-forge from 1.3.1 to 1.3.3 in /client

MJStone587/FinancialForge_MERN #7

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
MJStone587
Bump the npm_and_yarn group across 1 directory with 14 updates

deepjyotiroy079/react-port-v4 #23

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
deepjyotiroy079
chore(deps): bump node-forge from 1.3.1 to 1.3.3 in the npm_and_yarn group across 1 directory

replane-dev/replane-website #1

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
replane-dev
Bump node-forge from 1.3.1 to 1.3.3 in /web-vis/www

arazabishov/pvec-rs #121

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 4 comments
arazabishov
chore(deps): bump node-forge from 1.3.1 to 1.3.3 in /frontend

SigNoz/signoz #9903

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
SigNoz
Bump node-forge from 1.3.1 to 1.3.3

neinteractiveliterature/larp_library #3015

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
neinteractiveliterature
chore(deps)(deps): bump the npm_and_yarn group across 1 directory with 6 updates

simonzander/PeerWave #104

1.3.1 → 1.3.2 Patch PR
Open 6 months ago 3 comments
simonzander
Bump node-forge from 1.3.1 to 1.3.3

Zast96/traveling_site #1

1.3.1 → 1.3.3 Patch PR
Closed 6 months ago 1 comment
Zast96
Bump node-forge from 1.3.1 to 1.3.3

internxt/drive-mobile #335

1.3.1 → 1.3.3 Patch PR
Open 6 months ago 1 comment
internxt
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,656 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,536 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)