`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,705 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

Deveroonie/TFLStatus #222

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

koteba/react #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

swiftwave-org/swiftwave.org #72

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /website

aws-samples/aws-blockchain-node-runners #217

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2

cds-snc/ai-answers #740

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 3 updates

Dhruv-Techapps/auto-clicker-auto-fill #711

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /packages/utils/website in the npm_and_yarn group across 1 directory

imnaiyar/SkyHelper #382

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

travis-hughes/suit #5

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

mozilla-extensions/nimbus-devtools #119

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

danphenderson/dev-danhenderson #35

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /core/src/main/UI

zkarpinski/Luminous-Onion #145

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Alvin-Karanja/mortgage-calculator #27

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

X-oss-byte/jest #1433

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 6 comments

Bump node-forge from 1.3.1 to 1.3.2 in /nodejs/agents/rbm-nodejs-acme-pizza/functions

rcs-business-messaging/rbm-api-examples #48

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

victorv/quivr #96

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): Bump the npm_and_yarn group across 2 directories with 2 updates

SimenB/piscina #114

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

dynamic-framework/dynamic-retail-dashboard-template #76

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

NikkelM/Outlook-Mail-Notes #102

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

microsoftwala/spon #1

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

fezzopro/react-admin-dashboard #102

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /client

21jfong/tennis_mern #27

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

bichitra-linux/analog-clock-using-react #2

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

Madu-de/MaduChat #273

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /packages/grapys-vue/functions

receptron/grapys #76

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /datafusion/wasmtest/datafusion-wasm-app

shauryashaurya/arrow-datafusion #17

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /hangman

sdivyanshu90/react-projects #160

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

village-hall/village-hall.github.io #53

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

foss2cyber/reactive-ticket-app #51

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /rf-examen

ltiisidii/rf-examen-react #80

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

litingyes/nuxt-starter #235

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

muhammad-fiaz/website #76

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /openmetadata-ui/src/main/resources/ui

gengle/OpenMetadata #42

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /getting-started-app

lucassc/backstage-getting-started #45

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

megasanjay/scholar-stack-mvp #243

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

igor-psds/Portifolio #24

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /docs.feldera.com

feldera/feldera #5190

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /booklore-ui

booklore-app/booklore #1653

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

heyboi227/airline-ticket-management-app #1982

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /templates/angular

khaneliman/khanelinix #232

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

likecoin/publish-3ook-com #465

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

PAIR-code/wordcraft #33

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /client

AntoCLus/SpanglishwithAnto #35

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

cloudflare/puppeteer #167

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /landing-page

Owbird/One-Dev #56

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

codenificient/shoppy_dash #23

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /app

Ansteorra/KMP #508

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

CreativeZoller/RateCalc-Freelance #27

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /extensions/vscode-api-tests

sarvex/vscode #47

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

hadronomy/portfolio #125

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in /client

amrnet/amrnet #302

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,657 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,537 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`