Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 4 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps): bump node-forge from 1.3.1 to 1.3.2

muhlba91/fh-burgenland-bswe-docusaurus #221

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
muhlba91
Bump node-forge from 1.3.1 to 1.3.2

embrace-io/embrace-docs #576

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
embrace-io
chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

YashM20/vision #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
YashM20
Bump node-forge from 1.3.1 to 1.3.2

barkprotocol/nft-marketplace-dev #28

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
barkprotocol
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Reental/reental-aave-interface #23

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Reental
chore(deps): bump node-forge from 1.3.1 to 1.3.2

gengle/blueprint #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
gengle
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

kaylahimmel/shoplist #7

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
kaylahimmel
Bump node-forge from 1.3.1 to 1.3.2 in /templates/fullstack-app/frontend

Ajay-2005/templateforge #26

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Ajay-2005
Bump node-forge from 1.3.1 to 1.3.2

kromiii/today-i-learned #45

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kromiii
Bump node-forge from 1.3.1 to 1.3.2 in /webview-ui

AahPlexX/claude-dev2.0 #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
AahPlexX
build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

0s1n/react-quiz-with-firebase #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
0s1n
Bump node-forge from 1.3.1 to 1.3.2

aws-samples/llm_model_hub #111

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
aws-samples
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /apps/frontend

RobertMeissner/GameOverview #46

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
RobertMeissner
Bump node-forge from 1.3.1 to 1.3.2

prayoga23/aplikasi_website_simple_quicks_Prayoga-Nugroho_Pangestu #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
prayoga23
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

adamsochorec/slavic.media #38

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
adamsochorec
Bump node-forge from 1.3.1 to 1.3.2 in /monitoring/puppeteer-nodejs

rtCamp/privacy-sandbox-demos #18

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rtCamp
Bump node-forge from 1.3.1 to 1.3.2

spryker-community/CommerceQuest-website #325

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
spryker-community
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

arpitjain099/dispatch #28

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
arpitjain099
Bump node-forge from 1.3.1 to 1.3.2

satopian/axnospaint_for_Petit_Note #13

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
satopian
build(deps): bump node-forge from 1.3.1 to 1.3.2

darthkali/weemeal #65

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
darthkali
chore(deps): bump node-forge from 1.3.1 to 1.3.2

dhis2/sync-troubleshooting-app #27

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dhis2
Bump node-forge from 1.3.1 to 1.3.2

stealdeff/react-test #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
stealdeff
Bump node-forge from 1.3.1 to 1.3.2 in /image-search-at-scale/search-app

pinecone-field/laion-image-search #35

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pinecone-field
Bump node-forge from 1.3.1 to 1.3.2 in /web

rcy1314/echo-noise #7

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rcy1314
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /browser

yamadashy/repomix #972

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
yamadashy
Bump node-forge from 1.3.1 to 1.3.2

betagouv/docurba-nuxt3 #38

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
betagouv
Bump node-forge from 1.3.1 to 1.3.2

FelipeCalderaro/Anime-New-Front-End #32

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
FelipeCalderaro
Bump node-forge from 1.3.1 to 1.3.2

davevad93/pass-gen #166

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
davevad93
build(deps): bump node-forge from 1.3.1 to 1.3.2

ever-co/ever-rec-desktop #71

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
ever-co
chore(deps): bump node-forge from 1.3.1 to 1.3.2

FuelLabs/hyperlane-monorepo #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
FuelLabs
Bump node-forge from 1.3.1 to 1.3.2

nyadero/my-portfolio #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nyadero
Bump node-forge from 1.3.1 to 1.3.2 in /functions in the security-patches group across 1 directory

guiruggiero/guipt #67

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 4 comments
guiruggiero
Bump node-forge from 1.3.1 to 1.3.2

Societe-Astronomique-Montpellier/website #52

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Societe-Astronomique-Montpellier
chore(deps): bump node-forge from 1.3.1 to 1.3.2

publicsq/developers.publicsquare.com #184

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
publicsq
chore(deps): bump node-forge from 1.3.1 to 1.3.2

konsulin-care/konsulin-app #373

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
konsulin-care
Bump node-forge from 1.3.1 to 1.3.2

atharvayeola/personalportfolio #16

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
atharvayeola
chore(deps): bump node-forge from 1.3.1 to 1.3.2

IZGateway/izg-transformation-ui #92

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
IZGateway
Bump node-forge from 1.3.1 to 1.3.2

MrPancakes39/Todo-Expo-App #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
MrPancakes39
Bump node-forge from 1.3.1 to 1.3.2

hema0101/FrontTask #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hema0101
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /ui

mschn/boxfish #83

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
mschn
build(deps): bump node-forge from 1.3.1 to 1.3.2

buffed-labs/reactive-dot #1047

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
buffed-labs
Bump node-forge from 1.3.1 to 1.3.2

Elyk-Adnuram/Predictable_app #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Elyk-Adnuram
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs/en/getting-started/quickstart/js/genkit

googleapis/genai-toolbox #2053

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 14 comments
googleapis
Bump node-forge from 1.3.1 to 1.3.2

Lunchtime52/testsite #28

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Lunchtime52
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

calipsow/react-native-starter-kit #100

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
calipsow
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

alphagov/govuk-mobile-backend #418

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
alphagov
Bump node-forge from 1.3.1 to 1.3.2

fere-ai/fere-docs #38

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
fere-ai
Bump node-forge from 1.3.1 to 1.3.2 in /firebase-functions/functions

calipsow/react-native-starter-kit #99

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
calipsow
Bump node-forge from 1.3.1 to 1.3.2

nikelborm/daria-frontend-project #3

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nikelborm
Bump node-forge from 1.3.1 to 1.3.2

digitalaidseattle/plymouth-housing #365

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
digitalaidseattle
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)