`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,704 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
42 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 2 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 2 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

snade-dev/testDev #7

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

imshn/pitchgenie_app #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

vivekmallampati/VSS2025 #5

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

BrowserStackCE/debugging-hub #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps)(deps): bump node-forge from 1.3.1 to 1.3.2

sam-fakhreddine/aws-containers #97

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /mobile

regis-mugisha/savings-ms-client #24

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /web/libraries/klaro-js

gatech-arcs/cos-profiles #16

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

cycosoft/eyas-cli #1

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /client in the npm_and_yarn group across 1 directory

cyberdne/Ai #1

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

subculture-collective/clipper #442

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Chaiyphopnilpat/codelab-ai-genkit-rag #3

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /tools/android/dependency_analysis/js

JaclynCodes/chromium #7

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

presiannedyalkov/eco-balance-documentation #242

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 4 comments

Bump node-forge from 1.3.1 to 1.3.2

CertifiedWebMaster/OneShop-Netifly-Deployment #5

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 1 update

jkazimzade21/baku-reserve-mvp #2

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

mcclowes/docusaurus-plugin-banner #7

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

impay-pagamentos/nuxt-fee-plans #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

crypt0grapher/goliath-testnet-k8s #35

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in /functions in the npm_and_yarn group across 1 directory

OlivierMarteaux/A054_Eventorias #8

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

Sudo-psc/svlentes-hero-shop #183

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 5 comments

Bump node-forge from 1.3.1 to 1.3.2

K1tvkli/Resume-Weblog-Template #4

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

gnanirahulnutakki/devops-portal #3

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /bbb-graphql-client-test

devsecops-testing-cicd/bigbluebutton #17

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

siegrin/DigiPajak-UMKM #7

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

timothygachengo/react-native-new-maps-directions #2

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

rpidanny/cursor-usage-analytics #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

davidseanarms/exams-wiki #9

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /Universe/functions

ST10372590/prog7314_universe_application #17

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Shreya111111/Kendomanager_new #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /microsite

test-transferwise/backstage-fork-test4 #8

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /DOCUMENTATION_AND_NOTES/02_SERVER

1yololomg1/render-confirmlicense #2

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

chrillep/gitmoji-quiz #8

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /bigbluebutton-html5

devsecops-testing-cicd/bigbluebutton #16

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(docs-deps)(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs-technical

barry47products/mulligans-law #17

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

deps(deps): bump node-forge from 1.3.1 to 1.3.2

clandestinecmg/fmpnavigator-site #17

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

AmadeusITGroup/Dataspace_UI #7

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): Bump node-forge from 1.3.1 to 1.3.2

lassestilvang/symbi #18

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend in the npm_and_yarn group across 1 directory

aniljasel/My-Form #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

c4dt/noir #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

moyshik7/auroras-fog-wiki #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

trizist/twinkle-starter #10

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

ibrahimcesar/async-inspect #17

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

khadiija-ng/frontend #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /gemini/autocal/frontend

Sherlock999xxx/generative-ai #11

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

LucaPascucci/cvt-materialismo #18

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

JanSzewczyk/react-native-szumplate #30

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2 in /frontend

bnikanjam/FederatedAuthentication #5

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /web

AvesIT/plugin-barman-cloud #1

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /load-firestore-data

Chaiyphopnilpat/codelab-ai-genkit-rag #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

SpaceDudem/clubprog #8

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,656 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,536 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`