Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 4 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

openshift/lightspeed-console #1212

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 5 comments
openshift
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

mtdowner/starter-blog #62

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mtdowner
Bump node-forge from 1.3.1 to 1.3.2

Vanshitgupta9717/AarohanDGI #10

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Vanshitgupta9717
Bump node-forge from 1.3.1 to 1.3.2

seyfer/ngx-soap #17

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
seyfer
Bump node-forge from 1.3.1 to 1.3.2

WordPress/props-bot-action #209

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
WordPress
Bump node-forge from 1.3.1 to 1.3.2

girish-bidwai/selenium #72

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
girish-bidwai
chore(deps): bump node-forge from 1.3.1 to 1.3.2

dhis2/climate-app #91

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dhis2
build(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

robinpellegrims/pellegrims.dev #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
robinpellegrims
build(deps): bump node-forge from 1.3.1 to 1.3.2

iannak/react-js-testes-automatizados-front-end #33

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
iannak
Bump node-forge from 1.3.1 to 1.3.2

PSMRI/MMU-UI #292

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
PSMRI
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /widget

Rose2161/hub #377

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
Rose2161
Bump node-forge from 1.3.1 to 1.3.2

RohanDas28/Waifu-Finder #26

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
RohanDas28
Bump node-forge from 1.3.1 to 1.3.2

henrique-coder/dopamine #8

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
henrique-coder
Bump node-forge from 1.3.1 to 1.3.2

cuneyter/cocktail_explorer #47

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
cuneyter
Build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /web

FRACTAL-GAME-STUDIOS/fractal_boilerplate_lua_angular #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
FRACTAL-GAME-STUDIOS
chore(deps): bump node-forge from 1.3.1 to 1.3.2

thirdmadman/graphiql-app #118

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
thirdmadman
Bump node-forge from 1.3.1 to 1.3.2

HabeebOpe/stun #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
HabeebOpe
Bump node-forge from 1.3.1 to 1.3.2

frctools/rules-search #135

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
frctools
Bump node-forge from 1.3.1 to 1.3.2

homewizard/api-documentation #217

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
homewizard
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

betagouv/complements-alimentaires #2578

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
betagouv
build(deps): Bump node-forge from 1.3.1 to 1.3.2

decentraland/auth #224

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
decentraland
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /examples/development

runtime-env/runtime-env #498

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
runtime-env
Bump node-forge from 1.3.1 to 1.3.2 in /docs in the npm_and_yarn group across 1 directory

ollama4j/ollama4j #247

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
ollama4j
chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /packages/hedera-wallet-snap

hashgraph/hedera-metamask-snaps #1731

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hashgraph
chore: bump node-forge from 1.3.1 to 1.3.2 in /content_management_system

pass-culture/pass-culture-institutional #656

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pass-culture
Bump node-forge from 1.3.1 to 1.3.2

FrontFin/mesh-react-native-sdk #93

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
FrontFin
build(deps): bump node-forge from 1.3.1 to 1.3.2

MTDOJRP/docs #192

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
MTDOJRP
Bump node-forge from 1.3.1 to 1.3.2

TechFems-projects-and-resources/github-actions-workshop #26

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
TechFems-projects-and-resources
Bump node-forge from 1.3.1 to 1.3.2

vibhorjoshi/LeafDiseasePredictor #7

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vibhorjoshi
Bump node-forge from 1.3.1 to 1.3.2

bsv-blockchain/ts-sdk #393

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
bsv-blockchain
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

pchalupa/expo-alternate-app-icons #241

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pchalupa
chore(deps): bump node-forge from 1.3.1 to 1.3.2

jy95/ngx-json-schema-viewer #442

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jy95
Bump node-forge from 1.3.1 to 1.3.2

niyowski/frontend-at-scale #21

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
niyowski
build(deps): bump node-forge from 1.3.1 to 1.3.2

SwitchbackTech/compass #1312

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
SwitchbackTech
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /redacted-docs in the npm_and_yarn group across 1 directory

polentino/redacted #96

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
polentino
build(deps): bump node-forge from 1.3.1 to 1.3.2

SwitchbackTech/compass-docs #54

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
SwitchbackTech
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend

stabldev/TelegramRe #673

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
stabldev
build(deps): bump node-forge from 1.3.1 to 1.3.2

DTLab-LabCN/DTT-Docs #41

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
DTLab-LabCN
Bump node-forge from 1.3.1 to 1.3.2

pfoundation/p.foundation #108

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pfoundation
build(deps): bump node-forge from 1.3.1 to 1.3.2

vechain/vechain-sdk-js #2649

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vechain
Bump node-forge from 1.3.1 to 1.3.2 in /src

dylan-smith/DiveIntelligence #456

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
dylan-smith
Bump node-forge from 1.3.1 to 1.3.2

Dhanwi/WebGLShadow #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Dhanwi
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

ryanaidilp/stadata_flutter_sdk #153

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ryanaidilp
Bump node-forge from 1.3.1 to 1.3.2 in /client_app

oss-slu/shelter_volunteers #370

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
oss-slu
Bump node-forge from 1.3.1 to 1.3.2

Oakchris1955/cat-requests-ts #29

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
Oakchris1955
chore(deps): bump node-forge from 1.3.1 to 1.3.2

robertIsaac/nx-ng-nest #37

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
robertIsaac
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend/parcel-wizard

kgggh/parcelwizard #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
kgggh
Bump node-forge from 1.3.1 to 1.3.2 in /frontend/estate-fetch

danielzlatanov/estate-fetch #63

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
danielzlatanov
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /front-end

hashgraph/hedera-transaction-tool #2031

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
hashgraph
Bump node-forge from 1.3.1 to 1.3.2

nboyers/nobosoftware-website #18

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nboyers
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)