Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
about 17 hours ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 3 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 3 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 3 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /cl

GlacierEQ/courtlistener #2

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
chore(deps): update npm: bump node-forge from 1.3.1 to 1.3.2 in /docusaurus

davidhessler/mcp #58

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
davidhessler
Bump node-forge from 1.3.1 to 1.3.2

node-on-fhir/honeycomb #57

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
node-on-fhir
Bump node-forge from 1.3.1 to 1.3.2 in /pagination

milankatira/machine-coding-practice #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
milankatira
Bump node-forge from 1.3.1 to 1.3.2 in /consumerApp

trizist/zkLoyalty #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /services/portfolio

J-mazz/Mazzlabs.works #14

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
J-mazz
Bump node-forge from 1.3.1 to 1.3.2

KaT0819/geoclip #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
KaT0819
Bump node-forge from 1.3.1 to 1.3.2 in /examples/voice_solutions/one_way_translation_using_realtime_api

trizist/openai-cookbook #6

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

CelineLaValle/grignote_front #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
CelineLaValle
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

Dargon789/mempool #99

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
Dargon789
Bump node-forge from 1.3.1 to 1.3.2 in /web-starter/web/webpack

trizist/noir-examples #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /website

trizist/hydra #5

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

Leobelias/Portfolio #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Leobelias
build(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

JoelA510/AIAdvocate #35

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
JoelA510
Bump node-forge from 1.3.1 to 1.3.2

Djubz/codeql-action #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Djubz
chore(deps): bump node-forge from 1.3.1 to 1.3.2

saadaoui-salah/ultra #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
saadaoui-salah
Bump node-forge from 1.3.1 to 1.3.2

AshishYesale7/Calander-Ai #21

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
AshishYesale7
Bump node-forge from 1.3.1 to 1.3.2

SamaelxLunafreya/codelab-ai-genkit-rag #3

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
SamaelxLunafreya
build(deps): bump node-forge from 1.3.1 to 1.3.2

lorenzobaronio22/jobami #36

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
lorenzobaronio22
chore: bump node-forge from 1.3.1 to 1.3.2

AndresMaqueo/AFFiNE #99

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
AndresMaqueo
Bump node-forge from 1.3.1 to 1.3.2 in /docs

marcos1394/tokentrip #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
marcos1394
Bump node-forge from 1.3.1 to 1.3.2

beme-dev/custom-form #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
beme-dev
build(deps): Bump node-forge from 1.3.1 to 1.3.2

freshpex/skilltestjunior #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
freshpex
Bump node-forge from 1.3.1 to 1.3.2

dext7r/CloudFlare-ImgBed #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
dext7r
Bump node-forge from 1.3.1 to 1.3.2

sarava338/peyar-seyali #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sarava338
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

sujith-hub/blog #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sujith-hub
Bump node-forge from 1.3.1 to 1.3.2 in /Server

trizist/blocktalk #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /javascript/MaterialXView

trizist/MaterialX #2

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
Bump node-forge from 1.3.1 to 1.3.2

EduardoMVirgilio/nuxt_weather #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
EduardoMVirgilio
chore(deps): bump node-forge from 1.3.1 to 1.3.2

easiware/activepieces #16

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
easiware
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

mattstratton/conducky #440

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
mattstratton
build(deps): bump node-forge from 1.3.1 to 1.3.2

xavidop/cardex #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
xavidop
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

i-am-smolli/devtoolbox #156

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
i-am-smolli
Bump node-forge from 1.3.1 to 1.3.2

vittodevit/sito-accorcia #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vittodevit
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Mosasathaliya/amplication #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mosasathaliya
chore: bump node-forge from 1.3.1 to 1.3.2

hyperledger-labs/splice-wallet-kernel #932

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
hyperledger-labs
Bump node-forge from 1.3.1 to 1.3.2

Azure/logicapps-labs #30

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Azure
Bump node-forge from 1.3.1 to 1.3.2

vpatel071997/qri-card #29

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vpatel071997
Bump node-forge from 1.3.1 to 1.3.2

michaelahern/airthings-consumer-mcp #22

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
michaelahern
Bump node-forge from 1.3.1 to 1.3.2

trizist/expo-react-native-mwa-proof-of-concept #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
trizist
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

blinklabs-io/cf-moog #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
blinklabs-io
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

peteb4ker/romper #112

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
peteb4ker
Bump node-forge from 1.3.1 to 1.3.2

joaoopereira/one-click-hugo-cms #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
joaoopereira
Bump node-forge from 1.3.1 to 1.3.2

laisee/todo #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
laisee
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /ecosystem-tests/ts-browser-webpack

kritsanan1/openai-node #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
kritsanan1
Bump node-forge from 1.3.1 to 1.3.2

JOBAYERAHAMED00/angular1 #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
JOBAYERAHAMED00
Bump node-forge from 1.3.1 to 1.3.2

Mosasathaliya/transformerlab-app #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mosasathaliya
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /v4-mmp-plan-example

ab180/airbridge-expo-example #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ab180
Bump node-forge from 1.3.1 to 1.3.2

emberwire/auto-annotated-portfolio #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
emberwire
Bump node-forge from 1.3.1 to 1.3.2

JOBAYERAHAMED00/qww11 #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
JOBAYERAHAMED00
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)