`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,705 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

chibuike07/dare_me #6

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

zazuko/data-centric.zazuko.com #62

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

JustA3DObject/profia-portfolio-generator #37

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /website

Alteriom/painlessMesh #196

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

kiroku-code/safe-landing #36

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

95tuanle/service-master-react #36

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

notaryproject/ratify-web #159

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /example

Eppo-exp/react-native-sdk #90

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

bcgov/developer-portal #257

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

core-ds/arui-scripts #383

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

WeissSa/Agent-Guesser #36

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

kiznick/portfolio #13

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

AbsaOSS/cps-shared-ui #452

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

Asthriona/ai-gallery-front #25

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

reown-com/appkit-react-native #507

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

Rajnivas13/Airbnb-Clone #4

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

romw314/chess-no-25 #207

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

jesse-bonzo/website #26

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

descope-sample-apps/b2b-react-sample-app #312

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /client

MCA-NITW/mca_nitw #353

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore: bump node-forge from 1.3.1 to 1.3.2

defenseunicorns/pepr #2796

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 4 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

Deep-patra/Chatsy #18

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

primayuda/KDL-website-astro #27

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend/xhakt

HydraTechnologies-ops/xHAKT #92

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Laserfiche/laserfiche-sharepoint-integration #109

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /ClientApp

daniloopinheiro/dopNetAngular14 #16

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /Frontend

oss-slu/dads #252

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

eslutz/Portfolio-Website #143

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

LuisAPI/yagpdb-cc #9

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Corppooling/corppooling-front #107

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

fieropheonix6/kotlin-web-site #147

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2

nopinternational/nop-social #124

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

ricktu288/ray-optics #277

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

docker/welcome-to-docker #108

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

prugala/react-joyride-demo #3

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

sangayt1997/react-router-app #29

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

cmgchess/facemash-v2 #40

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2

BITNP/clinic_admin #9

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

Maia-DAO/ecosystem-docs #87

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /web in the npm_and_yarn group across 1 directory

opcotech/elemo #391

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /OneDrive/Рабочий стол/Yuriy-Allakherdov/course-start

Waldemar-00/resume #4

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

PinKushin/randomquotepage #14

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /backend

US-Trustee-Program/Bankruptcy-Oversight-Support-Systems #1657

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /functions

flutter/io_flip #542

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Kajal-lathiya/strive-blog-template #6

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

etherspot/etherspot-prime-sdk #152

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

foss2cyber/google-clone #37

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

letsbuilda/archives.letsbuilda.dev #59

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

progamesigner/boardgamegallery #29

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Bootstrap-Academy/admin-dashboard #301

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,657 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,537 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`