Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
about 16 hours ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 3 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 3 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 3 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

s-thom/botc-sound-replacer #7

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
s-thom
Bump node-forge from 1.3.1 to 1.3.2

samuelbeaulieu/test-reload-issue-expo #3

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
samuelbeaulieu
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /documentation

Agile-Software-Engineering-25/team-4-backend-abstract-file-service #7

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Agile-Software-Engineering-25
Bump node-forge from 1.3.1 to 1.3.2 in /use-window-resize

trizist/react-tutorial #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs

trizist/gaia #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
build(deps): bump node-forge from 1.3.1 to 1.3.2

absar091/quizzicallabsai #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
absar091
chore(deps): bump node-forge from 1.3.1 to 1.3.2

GlacierEQ/affine #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
Bump node-forge from 1.3.1 to 1.3.2

xagau/freshbridge-portal #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
xagau
Bump node-forge from 1.3.1 to 1.3.2

ucdavis/harvest-mobile #90

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ucdavis
chore(deps): bump node-forge from 1.3.1 to 1.3.2

VinoIA/studio_Fermentia #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
VinoIA
build(deps): bump node-forge from 1.3.1 to 1.3.2

trizist/archiveweb.page #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2

manojsinghchouhan00/contact-manager-app #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
manojsinghchouhan00
Bump node-forge from 1.3.1 to 1.3.2 in /with-nuxt

polarsource/examples #46

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
polarsource
build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /frontend

abhins0554/ServerGuard #4

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
abhins0554
Bump node-forge from 1.3.1 to 1.3.2 in /fixtures/view-transition

trizist/react #13

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

trizist/expo-rsc-movies #1

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
dependabot(deps): bump node-forge from 1.3.1 to 1.3.2 in /backstage

2bcloud-io/aks-platform-engineering-project #31

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
2bcloud-io
Bump node-forge from 1.3.1 to 1.3.2

loctran016/loctor-log #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
loctran016
Bump node-forge from 1.3.1 to 1.3.2

manojsinghchouhan00/demo #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
manojsinghchouhan00
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

GlacierEQ/authentik #18

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
Bump node-forge from 1.3.1 to 1.3.2

26B/wp-attachments #8

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
26B
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

PolukovY/superset-5.0.0 #198

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
PolukovY
Bump node-forge from 1.3.1 to 1.3.2

nyadero/kraftadmin-docs #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nyadero
Bump node-forge from 1.3.1 to 1.3.2

trizist/expo-maps-bug-repro #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2

wepaintai/wepaintai #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
wepaintai
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /superset-frontend

PolukovY/superset-5.0.0 #197

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
PolukovY
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Mosasathaliya/activepieces #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mosasathaliya
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /site

trizist/very_good_cli #9

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

asimsharf/playgrounds #4

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
asimsharf
Bump node-forge from 1.3.1 to 1.3.2 in /examples/preact

trizist/vercel #26

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /Website/ALIC-website-master/src/assets/img/File system/File system/Admin

AdityaJainghetal/ALIC-website-2 #22

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
AdityaJainghetal
Bump node-forge from 1.3.1 to 1.3.2 in /end-to-end-use-cases/book-character-mindmap

trizist/llama-cookbook #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /client

GlacierEQ/AI-Powered_Legal_Document_Assistant_Prototype #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
Bump node-forge from 1.3.1 to 1.3.2 in /pkgs/tools/admin/meshcentral

InSelfControll/nixos-channel #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
InSelfControll
Bump node-forge from 1.3.1 to 1.3.2

Gerald0Juni0r/climora-app #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Gerald0Juni0r
Bump node-forge from 1.3.1 to 1.3.2

appscode-cloud/rancher-ui-extension #37

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
appscode-cloud
Bump node-forge from 1.3.1 to 1.3.2 in /example-app

asudbury/use-fetch-with-callbacks #9

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
asudbury
build(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

ianlintner/Example-React-AI-Chat-App #112

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ianlintner
Bump node-forge from 1.3.1 to 1.3.2 in /functions

JPL-Git-Hub/tls #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
JPL-Git-Hub
chore: bump node-forge from 1.3.1 to 1.3.2

epam/statgpt-admin-frontend #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
epam
chore(deps): bump node-forge from 1.3.1 to 1.3.2

trizist/build-onchain-apps #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /Backend

Kanishk1420/Bloggify-Blogging-Platform #23

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Kanishk1420
chore: bump node-forge from 1.3.1 to 1.3.2

Firdaus0714/rferfer #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Firdaus0714
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /functions

trizist/super_dash #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /src/assets/img/File system/File system/Admin

AdityaJainghetal/ALIC-project2 #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
AdityaJainghetal
Bump node-forge from 1.3.1 to 1.3.2

raydanielg/atc-app #1

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
raydanielg
Bump node-forge from 1.3.1 to 1.3.2

waynerdy68/studio #6

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
waynerdy68
Bump node-forge from 1.3.1 to 1.3.2

trizist/processmaker #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
build(deps): bump node-forge from 1.3.1 to 1.3.2

cyrus07424/talkingThemeDecider #75

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
cyrus07424
chore(deps): bump node-forge from 1.3.1 to 1.3.2

GlacierEQ/recap-chrome #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
GlacierEQ
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)