Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
2 days ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 4 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 4 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 4 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 4 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2 in /ui

UchihaCortez/conductor #8

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
UchihaCortez
Bump node-forge from 1.3.1 to 1.3.2

nathanielgcowan/accordion-mark-01 #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nathanielgcowan
Bump node-forge from 1.3.1 to 1.3.2

vibhuti019/heenal-project #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vibhuti019
Bump node-forge from 1.3.1 to 1.3.2

smlabto/factcheckassistant #33

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
smlabto
Bump node-forge from 1.3.1 to 1.3.2

Netchicken/timetablereact #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Netchicken
Bump node-forge from 1.3.1 to 1.3.2

neherdata/www.neherdata.com #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
neherdata
Bump node-forge from 1.3.1 to 1.3.2

Mohammed-Taysser/shareme #12

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mohammed-Taysser
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

e-Spirit/crownpeak-pwa-template #151

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 6 comments
e-Spirit
Bump node-forge from 1.3.1 to 1.3.2

nftprotect/nftprotect-frontend #69

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nftprotect
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

SAP-samples/ui5-webcomponents-ngx-sample #97

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
SAP-samples
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

jadenchant/jaden-nuxt #120

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jadenchant
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /microsite

davidsalajan/backstage #448

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
davidsalajan
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

gilbertho502/calculadora-react #28

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
gilbertho502
Bump node-forge from 1.3.1 to 1.3.2

mag-d-alen/yoga_studio #27

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mag-d-alen
Bump node-forge from 1.3.1 to 1.3.2

nathanielgcowan/reviews-mark-04 #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nathanielgcowan
Bump node-forge from 1.3.1 to 1.3.2

TheNewC0der-24/Spotify #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
TheNewC0der-24
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /ui

stenic/ledger #768

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
stenic
Bump node-forge from 1.3.1 to 1.3.2

saeedkefayati/react-typescript-bilerplate #4

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
saeedkefayati
Bump node-forge from 1.3.1 to 1.3.2

adiadd/nothingness #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
adiadd
Bump node-forge from 1.3.1 to 1.3.2

navikt/bidrag-behandling-ui #556

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
navikt
Bump node-forge from 1.3.1 to 1.3.2

ita-social-projects/StreetCode_Client #1590

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ita-social-projects
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /example/todo-app

ds-fancode/redux-rewire #21

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ds-fancode
Bump node-forge from 1.3.1 to 1.3.2

dev-chouhan/TextUtils_renewed #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dev-chouhan
Bump node-forge from 1.3.1 to 1.3.2

azzabouYOSRI/learning #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
azzabouYOSRI
Bump node-forge from 1.3.1 to 1.3.2

davidpiredda/veggietable #18

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
davidpiredda
Bump node-forge from 1.3.1 to 1.3.2

NOWcash/GitTubes #307

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 5 comments
NOWcash
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /src/test/resources/repo/multi-gradle-module/ui-app

MediaMarktSaturn/technolinator #898

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
MediaMarktSaturn
Bump node-forge from 1.3.1 to 1.3.2

Rocket-Rescue-Node/rescue-ui #190

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Rocket-Rescue-Node
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /website

visgl/react-google-maps #875

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
visgl
Bump node-forge from 1.3.1 to 1.3.2

sagarlade/MovieApp #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sagarlade
Bump node-forge from 1.3.1 to 1.3.2

muhammad-shumail/react-blog-app-with-jsonPlaceholder-API #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
muhammad-shumail
deps(deps-dev): bump node-forge from 1.3.1 to 1.3.2

alderichoarau/alderichoarau.github.io #48

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
alderichoarau
Bump node-forge from 1.3.1 to 1.3.2 in /fixtures/flight

donnygitsome/react #171

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
donnygitsome
chore(deps): bump node-forge from 1.3.1 to 1.3.2

fireblocks/recovery #182

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
fireblocks
Bump node-forge from 1.3.1 to 1.3.2

GustavoHenriqueSchmitz/React-Charts-Tables #44

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
GustavoHenriqueSchmitz
build(deps): bump node-forge from 1.3.1 to 1.3.2

ever-co/ever-teams #4178

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
ever-co
Bump node-forge from 1.3.1 to 1.3.2 in /fixtures/flight

16CentAstrology/react #176

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
16CentAstrology
Bump node-forge from 1.3.1 to 1.3.2

ijayhub/Leaflet.DistortableImage #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ijayhub
Bump node-forge from 1.3.1 to 1.3.2 in /blindturner

JDaniloC/BlindTuner #75

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
JDaniloC
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /onlyoffice-docspace-wordpress-block

ONLYOFFICE/onlyoffice-docspace-wordpress #53

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ONLYOFFICE
Bump node-forge from 1.3.1 to 1.3.2

NexusMutual/docs #64

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
NexusMutual
Bump node-forge from 1.3.1 to 1.3.2

ApiBR/vagas-aggregator-ui #471

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 8 comments
ApiBR
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /pix-ctl-full

klarkc/nix-templates #481

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
klarkc
Bump node-forge from 1.3.1 to 1.3.2

bancorprotocol/carbon-app #2005

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 7 comments
bancorprotocol
Bump node-forge from 1.3.1 to 1.3.2

GoogleCloudPlatform/documentai-sheets-plugin #25

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GoogleCloudPlatform
Bump node-forge from 1.3.1 to 1.3.2

eranseg74/clips #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
eranseg74
Bump node-forge from 1.3.1 to 1.3.2

Ernir/ernir-angular #209

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Ernir
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

nikelborm/hackathon_vtb_more_tech_7_10_2022 #22

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nikelborm
chore(deps): bump node-forge from 1.3.1 to 1.3.2

tyler-technologies-oss/forge-design-system #163

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tyler-technologies-oss
Bump node-forge from 1.3.1 to 1.3.2 in /backend

google-wallet/android-codelab #31

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
google-wallet
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)