Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 4 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

phareim/legacy-rpg #16

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
phareim
Bump node-forge from 1.3.1 to 1.3.2

vzwingma/style-et-mini #230

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vzwingma
Bump node-forge from 1.3.1 to 1.3.2

internxt/pc-cloud #11

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
internxt
Bump node-forge from 1.3.1 to 1.3.2

avijitsamanta/QuadB_Todo #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
avijitsamanta
Bump node-forge from 1.3.1 to 1.3.2

omercnet/renovate-lookup #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
omercnet
chore(deps): bump node-forge from 1.3.1 to 1.3.2

envoy1084/son-of-anton-agentic-ethereum #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
envoy1084
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

deriv-com/smartcharts-champion #144

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
deriv-com
Bump node-forge from 1.3.1 to 1.3.2

karimprime/E-Commerce-App #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
karimprime
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

mateuszJS/magic-render #279

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mateuszJS
Bump node-forge from 1.3.1 to 1.3.2

aditya-8108/countdown-timer #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
aditya-8108
Bump node-forge from 1.3.1 to 1.3.2 in /frontend in the npm_and_yarn group across 1 directory

djleamen/Scrozam #24

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
djleamen
chore(deps): Bump node-forge from 1.3.1 to 1.3.2

NexaNode-dev/nexa-portfolio #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
NexaNode-dev
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend in the npm_and_yarn group across 1 directory

AlexisRellon/GAIA #23

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
AlexisRellon
Bump node-forge from 1.3.1 to 1.3.2

WayneMacMavis/Inventory-Management #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
WayneMacMavis
Bump node-forge from 1.3.1 to 1.3.2

ChuanGz/bp-onboarding #8

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ChuanGz
Bump node-forge from 1.3.1 to 1.3.2

itsbhavsagar/crwn-clothing #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
itsbhavsagar
Bump node-forge from 1.3.1 to 1.3.2 in /src/components

hms-dbmi/udi-grammar #34

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hms-dbmi
Bump node-forge from 1.3.1 to 1.3.2 in /ui

wojciechlas/react-python-movies #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
wojciechlas
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

suica-crux/chigaku #316

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
suica-crux
Bump node-forge from 1.3.1 to 1.3.2

ChrisRahme/NuxtJs_Portfolio #2

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ChrisRahme
Bump node-forge from 1.3.1 to 1.3.2

awtrimpe/spotify_local_replacer #23

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
awtrimpe
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /ExpenseTracker.UI/mobile

akhalinem/expense-tracker #30

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
akhalinem
Bump node-forge from 1.3.1 to 1.3.2

hms-dbmi/udi-grammar #33

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hms-dbmi
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

mvlanga/mvlanga-com-astro #112

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mvlanga
build(deps): bump node-forge from 1.3.1 to 1.3.2

iBotPeaches/apktool.org #30

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
iBotPeaches
Bump node-forge from 1.3.1 to 1.3.2

karimprime/Task-2-WineOne #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
karimprime
Bump node-forge from 1.3.1 to 1.3.2 in /docs

joshkotrous/simplCMS #39

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
joshkotrous
Bump node-forge from 1.3.1 to 1.3.2

Lambda-Network/RAG-AI-Frontend #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Lambda-Network
Bump node-forge from 1.3.1 to 1.3.2

gorfo66/flashbird-rides #77

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
gorfo66
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /functions

Peter-Eshak-Abdo/abona-faltaus #254

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Peter-Eshak-Abdo
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend/functions

onkr0d/Titanic #144

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
onkr0d
Bump node-forge from 1.3.1 to 1.3.2

SJ-tech-Sweden/eventory-multisite #17

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
sj-tech-sweden
Bump node-forge from 1.3.1 to 1.3.2

crazyuploader/one-click-hugo-cms #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
crazyuploader
build(deps): bump node-forge from 1.3.1 to 1.3.2

InhaNotice/inha_notice_nestjs #39

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
InhaNotice
chore(deps): bump node-forge from 1.3.1 to 1.3.2

divvi-xyz/divvi-mobile #308

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
divvi-xyz
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

ReidyT/HiveBalance #56

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
ReidyT
Bump node-forge from 1.3.1 to 1.3.2

blackburn32/the-glucose-games #133

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
blackburn32
Bump node-forge from 1.3.1 to 1.3.2 in /mern-auth/client

gowtham-ggg/MERN-Projects #32

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 6 comments
gowtham-ggg
Bump node-forge from 1.3.1 to 1.3.2

SauelAlmonte/little_lemon_restaurant #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
SauelAlmonte
Bump node-forge from 1.3.1 to 1.3.2 in /examples/docusaurus

Gurubase/gurubase-widget #85

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Gurubase
Bump node-forge from 1.3.1 to 1.3.2 in /app

jongan69/lotteryprogram #29

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
jongan69
Bump node-forge from 1.3.1 to 1.3.2

SAP/csn-interop-specification #120

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
SAP
Bump node-forge from 1.3.1 to 1.3.2

cheesestringer/microverse #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
cheesestringer
Bump node-forge from 1.3.1 to 1.3.2 in /client

Y4s1n1980/CIT #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Y4s1n1980
Bump node-forge from 1.3.1 to 1.3.2

visitscotland/visitscotland-dot-com-frontend #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
visitscotland
Bump node-forge from 1.3.1 to 1.3.2

jongan69/nftcreatorupgrade #18

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
jongan69
Bump node-forge from 1.3.1 to 1.3.2

chanmi4983/OSS_API_Project #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
chanmi4983
Bump node-forge from 1.3.1 to 1.3.2

d135-1r43/agiles-ehrenamt #38

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
d135-1r43
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

wiredmonash/monstar #124

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
wiredmonash
Bump node-forge from 1.3.1 to 1.3.2

IsaacHatton/solutionbank #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
IsaacHatton
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)