Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 3 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 3 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 3 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

Ethan-Chiper/business_hero_node_api #13

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Ethan-Chiper
Bump node-forge from 1.3.1 to 1.3.2

allancoding/games #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
allancoding
Bump node-forge from 1.3.1 to 1.3.2

Mathilde0712/karostudio33react #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mathilde0712
build(deps): bump node-forge from 1.3.1 to 1.3.2

haandol/web-balatro #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
haandol
chore(deps): bump node-forge from 1.3.1 to 1.3.2

mitigate-dev/react-native-d3-chart #10

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mitigate-dev
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /ui

entrepeneur4lyf/specif-ai #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
entrepeneur4lyf
Bump node-forge from 1.3.1 to 1.3.2 in /docs

kuttysoftmy/AutoAgent #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
kuttysoftmy
Bump node-forge from 1.3.1 to 1.3.2 in /workspaces/gcp-projects

intive/backstage-community-plugins #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
intive
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

trizist/agave #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
trizist
Bump node-forge from 1.3.1 to 1.3.2 in /genkit_flutter_agentic_app/genkit_backend

flutter/demos #67

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
flutter
Bump node-forge from 1.3.1 to 1.3.2 in /workspaces/jaeger

intive/backstage-community-plugins #33

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
intive
Bump node-forge from 1.3.1 to 1.3.2

ck-tom/nextjs-blog-theme #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ck-tom
Bump node-forge from 1.3.1 to 1.3.2

yeikel/dependabot-action #19

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
yeikel
Bump node-forge from 1.3.1 to 1.3.2

Okazakee/spendr #6

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Okazakee
Bump node-forge from 1.3.1 to 1.3.2 in /server

kartikmehta8/thedaotool #111

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kartikmehta8
chore(deps): bump node-forge from 1.3.1 to 1.3.2

kuttysoftmy/it-tools #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kuttysoftmy
Bump node-forge from 1.3.1 to 1.3.2 in /tools/browsertime

mozilla-conduit/ff-test #24

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mozilla-conduit
Bump node-forge from 1.3.1 to 1.3.2

ergishasani/Neighborhood-Bulletin #76

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ergishasani
chore(deps): bump node-forge from 1.3.1 to 1.3.2

kritsanan1/reader #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
kritsanan1
Bump node-forge from 1.3.1 to 1.3.2

BROCKUGANDA/cars #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
BROCKUGANDA
Bump node-forge from 1.3.1 to 1.3.2

bsv-blockchain/message-box-client #26

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
bsv-blockchain
Bump node-forge from 1.3.1 to 1.3.2

Bahmni/bahmni-apps-frontend #117

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Bahmni
Bump node-forge from 1.3.1 to 1.3.2

MichaelBiegluk/nuxt-starter-StackBlitz #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
MichaelBiegluk
Bump node-forge from 1.3.1 to 1.3.2

4429BrandingnMarketing/Create-npm-publish-github-packages.yml-ops-starter #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
4429BrandingnMarketing
Bump node-forge from 1.3.1 to 1.3.2

Issadeen/ia #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Issadeen
Bump node-forge from 1.3.1 to 1.3.2

entrepeneur4lyf/social-app #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
entrepeneur4lyf
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /packages/ui-angular

Azure-Samples/azure-ai-travel-agents #152

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
Azure-Samples
Bump node-forge from 1.3.1 to 1.3.2

jongan69/NFT-X-VERIFY #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
jongan69
chore(deps): bump node-forge from 1.3.1 to 1.3.2

shin-sforzando/heartbeat #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
shin-sforzando
Bump node-forge from 1.3.1 to 1.3.2

mbirali/learn-angular #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mbirali
build(deps): bump node-forge from 1.3.1 to 1.3.2

shazzar00ni/flux-ai-imgs-template #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
shazzar00ni
Bump node-forge from 1.3.1 to 1.3.2

hmcts/opal-frontend-common-ui-lib #308

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
hmcts
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /macapp

GlacierEQ/ollama #24

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
GlacierEQ
build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

ahmeddoosama/educatly-blogs #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ahmeddoosama
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

GlacierEQ/word-GPT-Plus #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
GlacierEQ
Bump node-forge from 1.3.1 to 1.3.2

stamm-phoenix/website-astro #26

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
stamm-phoenix
Bump node-forge from 1.3.1 to 1.3.2

tyler-tee/bidright-app #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tyler-tee
chore(deps): bump node-forge from 1.3.1 to 1.3.2

entrepeneur4lyf/lxd-ui #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
entrepeneur4lyf
Bump node-forge from 1.3.1 to 1.3.2 in /website

entrepeneur4lyf/monaco-editor #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
entrepeneur4lyf
Bump node-forge from 1.3.1 to 1.3.2

ohathaway/ohlaw-www-2025 #43

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
ohathaway
chore(deps): bump node-forge from 1.3.1 to 1.3.2

tuanpham1406/laundry-note #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tuanpham1406
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

Sahamati/superset #22

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Sahamati
Bump node-forge from 1.3.1 to 1.3.2 in /ui in the npm_and_yarn group across 1 directory

hoprnet/rfc #69

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
hoprnet
chore(deps): bump node-forge from 1.3.1 to 1.3.2

yellow-hammer/dev-rules #49

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
yellow-hammer
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /apps/frontend

danieljancar/hangbuddies #121

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
danieljancar
Bump node-forge from 1.3.1 to 1.3.2 in /functions

BossEros/Navigo #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
BossEros
Bump node-forge from 1.3.1 to 1.3.2

siddant-rachha/blog-web-app #110

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
siddant-rachha
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

soumya-shome/Education-Management-System #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
soumya-shome
chore(deps): bump node-forge from 1.3.1 to 1.3.2

PrismaPhotonics/grafana #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
PrismaPhotonics
⬆️ Bump node-forge from 1.3.1 to 1.3.2

fjbatresv/pet-app #38

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
fjbatresv
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)