Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 4 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

WegenerSteven/Unesco #17

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
WegenerSteven
Bump node-forge from 1.3.1 to 1.3.2 in /client

vitor-belim/react-nodejs #27

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vitor-belim
build(deps): bump node-forge from 1.3.1 to 1.3.2

Viren070/guides #192

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Viren070
chore(deps): bump node-forge from 1.3.1 to 1.3.2

iannak/lista_tarefas #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
iannak
Bump node-forge from 1.3.1 to 1.3.2

Ostorlab/oxotitan #135

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Ostorlab
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

CiceroLino/audio-visualizer #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
CiceroLino
Bump node-forge from 1.3.1 to 1.3.2

Laplusdestiny/SingSong_frontend #49

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Laplusdestiny
chore(deps): bump node-forge from 1.3.1 to 1.3.2

deriv-com/bot #625

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
deriv-com
chore(deps): bump node-forge from 1.3.1 to 1.3.2

shadowofleaf96/PortFolio-NextJS #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
shadowofleaf96
chore(deps): bump node-forge from 1.3.1 to 1.3.2

infinyon/fluvio-docs #421

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
infinyon
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

DhanushNehru/CustomCodeEditor #214

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
DhanushNehru
chore(deps): bump node-forge from 1.3.1 to 1.3.2

innovate42/saas-demo-components #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
innovate42
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

xBlaz3kx/website #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
xBlaz3kx
Bump node-forge from 1.3.1 to 1.3.2

govuk-one-login/static-error-pages #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
govuk-one-login
Bump node-forge from 1.3.1 to 1.3.2

mslotwinski-dev/eWybory #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mslotwinski-dev
Bump node-forge from 1.3.1 to 1.3.2

Spoekle/SSRM-automation #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Spoekle
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

juspay/superposition #763

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
juspay
Bump node-forge from 1.3.1 to 1.3.2

gethsun1/gkm #2

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
gethsun1
Bump node-forge from 1.3.1 to 1.3.2 in /samples/react-component-redux

Stwissel/super-procode-mode #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Stwissel
Bump node-forge from 1.3.1 to 1.3.2

benhalverson/benhalverson.dev #22

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
benhalverson
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /client

frgrisk/turbo-deploy #127

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
frgrisk
Bump node-forge from 1.3.1 to 1.3.2 in /functions

activout/bankid-demo-backend-firebase #19

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
activout
Bump node-forge from 1.3.1 to 1.3.2

Juandbpimentel/projeto-react-native-sistema-ufc #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Juandbpimentel
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /post-scan-actions/gcp-python-slack-notification

DW225/cloudone-filestorage-plugins #9

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
DW225
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /code-confluence

unoplat/unoplat-code-confluence #990

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
unoplat
Bump node-forge from 1.3.1 to 1.3.2

s-rigaud/three.js #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
s-rigaud
Bump node-forge from 1.3.1 to 1.3.2

Mihonarium/nanosystems #28

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mihonarium
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

Symph0nia/CyberEdge #66

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Symph0nia
Bump node-forge from 1.3.1 to 1.3.2 in /client

bobzozu/react_express_mysql_full_stack_application #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
bobzozu
Bump node-forge from 1.3.1 to 1.3.2

igorradovanov/Drive-Images-Embed #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
igorradovanov
Bump node-forge from 1.3.1 to 1.3.2 in /verify-ui

mosip/inji-verify #961

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mosip
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

chensihai/OpenDevin #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
chensihai
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

HDRUK/safepeopleregistry-web #571

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
HDRUK
build(deps): bump node-forge from 1.3.1 to 1.3.2

google-marketing-solutions/rsa-ai-generator #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 5 comments
google-marketing-solutions
Bump node-forge from 1.3.1 to 1.3.2

mozilla-extensions/privileged-test-xpi #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mozilla-extensions
Bump node-forge from 1.3.1 to 1.3.2

enonic/tutorial-jest #564

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
enonic
Bump node-forge from 1.3.1 to 1.3.2

rishabh30Gupta/GhatsWeb #24

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
rishabh30Gupta
Bump node-forge from 1.3.1 to 1.3.2

djensenius/FluxHaus-Server #59

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
djensenius
Bump node-forge from 1.3.1 to 1.3.2

qcjxs-hn/naichd #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
qcjxs-hn
Bump node-forge from 1.3.1 to 1.3.2

TheManishHQ/pomoplus-archived #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
TheManishHQ
Bump node-forge from 1.3.1 to 1.3.2

TheFirePanel/website #253

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
TheFirePanel
Bump node-forge from 1.3.1 to 1.3.2

MisterPea/template-minimal-react-18-typescript #16

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MisterPea
chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates

migrationsverket/midas #950

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
migrationsverket
Bump node-forge from 1.3.1 to 1.3.2

wisemapping/wisemapping-frontend #32

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
wisemapping
build(deps): Bump node-forge from 1.3.1 to 1.3.2

alainncls/proof-of-audit #42

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
alainncls
Bump node-forge from 1.3.1 to 1.3.2 in /client

oshkoshbagoshh/big-ben-v2 #1

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
oshkoshbagoshh
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /app

mano-sesan/mano #1138

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mano-sesan
Bump node-forge from 1.3.1 to 1.3.2 in /interface

Hu-Fi/Mr.Market #329

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Hu-Fi
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

OpenRailAssociation/netzgrafik-editor-frontend #650

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
OpenRailAssociation
Bump node-forge from 1.3.1 to 1.3.2

csenet/k1h.dev-new #11

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
csenet
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)