`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,705 Dependabot PRs

Latest PR:
about 9 hours ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 3 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 3 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /client

AGWU662/micro #8

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

SpaceDudem/awesome-todo #12

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

mamudulislam/trendymartcolapp #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /server

Eliahhango/Civil-web #5

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /tutorial_implementation/tutorial30/nextjs_frontend

raphaelmansuy/adk_training #46

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

filecoin-project/filecoin-pin-website #132

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

mcclowes/docusaurus-plugin-glossary #9

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

codeready-toolchain/devsandbox-dashboard #10

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

deepak-sekarbabu-coder/apargo #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

trizist/blink-starter-solana #8

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

jackgraver/simple-track #14

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

KHET-1/md-reader-pro #106

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /docs

opendatahub-io/mlflow #23

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

JoelA510/PlanterPlan-Alpha #19

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

dcsil/achievo-app #45

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

uchihamalolan/lyrical #3

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

dezerv/portfolio-tracker-sdk-docs #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

amina333-15/gsb-frais-react #1

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

Kamaiko/HalteroFit #51

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

soggieloso/google-keep-clone #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

metinemredonmez/podcast_app #3

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

evanholmes/keegan-electrical #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

JulianNicholls/palette-visualiser-6 #9

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

rweritz/excribe-dev #6

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /deployment/cdk/opensearch-service-migration

Chaiyphopnilpat/opensearch-migrations #5

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

surturn/farm-assist-grow #6

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /mobile

Maximus019BG/JARVIS #18

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

Informatievlaanderen/OSLO-codelijsten #6

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

deps(deps): bump node-forge from 1.3.1 to 1.3.2

RazonIn4K/shopmatch-pro #125

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

goodgollyholly/developer-portal #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /mobile

alamgir8/cash-book #4

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps)(deps): bump node-forge from 1.3.1 to 1.3.2

alternatefutures/service-cloud-api #53

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

ErasmusEgalitarian/educado-app #3

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

CertifiedWebMaster/one-click-hugo-oneshop-netifly #5

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /website in the npm_and_yarn group across 1 directory

Karthiktests/garnet #16

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /frontend

AGWU662/micro #7

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

trizist/blinks-react-native #8

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

opefyre/elixiary-ai-firebase-studio #171

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /tabs

trizist/react-tutorial #18

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

MutatioStrategic/jhs-law-website #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /.netlify/plugins

brandonlacoste9-tech/Beehive #193

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /documentation

bia-technologies/rat #18

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

raphaelmansuy/adk_training #45

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /functions

Screendead/minecraft-server-admin #28

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /scroll-indicator

trizist/react-tutorial #17

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

JaclynCodes/react-native #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /TodoApp

Tibule12/AutoPromote #46

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

yewonit/tychicus-dashboard #11

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

afsilva3021/sejassxy #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /agent_starter_pack/frontends/adk_live_react/frontend

billlzzz10/agent-starter-bl1nk #5

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 4 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,656 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,536 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`