Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 3 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 3 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 3 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 3 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

adamsimp/project-emails #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
adamsimp
Bump node-forge from 1.3.1 to 1.3.2

kritsanan1/expo #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
kritsanan1
Bump node-forge from 1.3.1 to 1.3.2

shreyasmhaske/nuxt-starter #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
shreyasmhaske
Bump node-forge from 1.3.1 to 1.3.2 in /solana-program-library/docs

trizist/governance-program-example #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

baditaflorin/one-click-hugo-cms #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
baditaflorin
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /microsite

intive/backstage #19

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
intive
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Astervia/wacraft-client #61

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Astervia
Bump node-forge from 1.3.1 to 1.3.2

Veevarts/Backend #51

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
Veevarts
Bump node-forge from 1.3.1 to 1.3.2

mvlanga/annahoffmeister-astro #57

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mvlanga
Bump node-forge from 1.3.1 to 1.3.2

karanguleria/noospherehealingchamber #20

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
karanguleria
Bump node-forge from 1.3.1 to 1.3.2

swordali/sb1-mx6kwuoq #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
swordali
Bump node-forge from 1.3.1 to 1.3.2

stanford-developers/levante-dashboard-copy #49

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
stanford-developers
Bump node-forge from 1.3.1 to 1.3.2

Shreyash1003/real_estate #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Shreyash1003
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

pryabov/lines-game-ai #3

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pryabov
Bump node-forge from 1.3.1 to 1.3.2

Prajwal2811/rentup.github.io #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Prajwal2811
⬆️ Bump node-forge from 1.3.1 to 1.3.2

slandath/syntax-travel-nuxt #71

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
slandath
Bump node-forge from 1.3.1 to 1.3.2

kritsanan1/tanstack-template #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
kritsanan1
Bump node-forge from 1.3.1 to 1.3.2 in /radio-app

BuddhikaSadun/sethfm-app #16

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
BuddhikaSadun
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

labbasaiteja/Brain-Bridge-App #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
labbasaiteja
chore(deps): bump node-forge from 1.3.1 to 1.3.2

nguyenthanhan/real-scale-solar-system #9

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
nguyenthanhan
Bump node-forge from 1.3.1 to 1.3.2

DeanMichael/recipe-ai #83

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
DeanMichael
Bump node-forge from 1.3.1 to 1.3.2

mrmonroe/jaxmc-hugo #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mrmonroe
Bump node-forge from 1.3.1 to 1.3.2 in /Chapter19/navigation-header

PacktPublishing/React-and-React-Native-6E #25

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
PacktPublishing
build(deps): bump node-forge from 1.3.1 to 1.3.2

exuseric/personal-portfolio #50

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
exuseric
Bump node-forge from 1.3.1 to 1.3.2 in /passkey-frontend

trizist/passkeys #3

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2

GlacierEQ/tinymce #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
Bump node-forge from 1.3.1 to 1.3.2 in /client

Rashdamada/vulnerable-rest-api #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Rashdamada
Bump node-forge from 1.3.1 to 1.3.2

Erika-Belicova/portfolio #76

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Erika-Belicova
Bump node-forge from 1.3.1 to 1.3.2 in /resources/server/src/landingpage

camptocamp/QGIS #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
camptocamp
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /superset-frontend

lavanda-uk/superset #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
lavanda-uk
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

mollanegash/ordertrackingsystem #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mollanegash
Bump node-forge from 1.3.1 to 1.3.2

bahyusanciko/react-portfolio #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
bahyusanciko
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/with-cloudflare-workers

kritsanan1/supabase #53

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
kritsanan1
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

allemandi/passage-prep #74

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
allemandi
Bump node-forge from 1.3.1 to 1.3.2

johnhelmuth/victorian-metas #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
johnhelmuth
chore(deps): bump node-forge from 1.3.1 to 1.3.2

mralaminahamed/author-profile-blocks #26

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mralaminahamed
Bump node-forge from 1.3.1 to 1.3.2

awhipp/atr-montecarlo #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
awhipp
Bump node-forge from 1.3.1 to 1.3.2 in /frontend-rt

laurourbano/project-rt #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
laurourbano
Bump node-forge from 1.3.1 to 1.3.2

benjaminlewandowski/nuxtTw4ShadcnBiomeTemplate #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
benjaminlewandowski
chore(deps): bump node-forge from 1.3.1 to 1.3.2

contentstack/kickstart-nuxt-ssr #28

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
contentstack
Bump node-forge from 1.3.1 to 1.3.2

Kubraaygun/WalletApp #6

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Kubraaygun
build(deps): bump node-forge from 1.3.1 to 1.3.2

jonasmarco/nuxt-rick-and-morty #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jonasmarco
Bump node-forge from 1.3.1 to 1.3.2

vigneshpandi2907/vignesh-portfolio-ng #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vigneshpandi2907
Bump node-forge from 1.3.1 to 1.3.2 in /load-firestore-data

robert2687/firrebase-genkit-rag #10

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
robert2687
Bump node-forge from 1.3.1 to 1.3.2

mdgaziur/mini-chat #2

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mdgaziur
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /datafusion/wasmtest/datafusion-wasm-app

elastiflow/datafusion #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
elastiflow
Bump node-forge from 1.3.1 to 1.3.2

nabilkadouri/kadouri-nabil-examen-front #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nabilkadouri
Bump node-forge from 1.3.1 to 1.3.2 in /client/web/angular-customer-app

FirebaseExtended/solution-ai-barista #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
FirebaseExtended
Bump node-forge from 1.3.1 to 1.3.2

codewheezy/medicon #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
codewheezy
Bump node-forge from 1.3.1 to 1.3.2

millbj92/PoliticalRadar #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
millbj92
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)