`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,705 Dependabot PRs

Latest PR:
2 days ago

Unique Repositories:
4,643 repositories

Unique Repos (30 days):
29 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 5 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

medik8s/node-remediation-console #81

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

mattbartley/nasa-cam #83

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

peasee/roll #63

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /web

TimoVink/timovink-website #270

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

ecyrbe/zodios #686

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

tenkirin/Lost-My-Music #46

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

rtCamp/pwa-wp #69

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

memser-spaceport/pln-directory-portal #2767

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

⬆️ Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

romantech/mini-community #38

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

homebridge-eufy-security/plugin #720

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /templates/default

costrojs/costro-templates #59

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /examples/voice_solutions/one_way_translation_using_realtime_api

openai/openai-cookbook #2260

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

apache/seatunnel-website #401

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs/metatype.dev

metatypedev/metatype #1054

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /web

Clivern/Cattle #769

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

softstone1/web-app #42

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): Bump node-forge from 1.3.1 to 1.3.2

hankei6km/guratan #254

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

stackbuilders/nuxt-utm #67

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /tools/subgraph-example

hiero-ledger/hiero-json-rpc-relay #4652

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

Gabriel0598/DsMovie #41

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /angular-spa

Azure-Samples/ms-identity-docs-code-javascript #181

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend

hashgraph/guardian #5507

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

mxenabled/react-native-widget-sdk #109

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 10 updates

ourjapanlife/findadoc-web #1603

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/create-react-app-typescript

RyanClementsHax/tailwindcss-themer #176

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 4 comments

Bump node-forge from 1.3.1 to 1.3.2

tchapeaux/fr-22-results-visualizer #35

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

EightfoldAI/octuple #1052

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

necordjs/necord.org #634

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

craigmorrison/example-module-federation #9

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2

chkware/chkware.github.io #121

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /e2e/embedding-sdk-host-apps/angular-20-host-app

appchoose/metabase #16

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

DaftDoris/newsdesk #847

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

PaloAltoNetworks/docusaurus-openapi-docs #1252

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

swantzter/graphql-firebase-subscriptions #21

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

moodle/devdocs #1472

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

aws-observability/aws-rum-web #715

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

fangyi-zhou/factorio-nuclear-power #41

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

fullstack-devops/fullstack-devops.github.io #222

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /projects/react/06_github_cards

sswietoniowski/learning-html-css-javascript #707

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /website

ARGOeu/eosc-recommender-metrics #256

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

opencost/opencost-website #439

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /sdk

fingerprintjs/fingerprintjs-pro-react-native #219

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

costrojs/costrojs.github.io #56

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

dvanoni/notero #766

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /build/frontend-legacy

ConnectionMaster/server #593

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

joshbatley/muffled-ui #185

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

myrotvorets/wp-plugin-identigraf #2116

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

wix-incubator/obsidian #252

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs

ingenuity-build/cosmos-sdk #2493

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 4 comments

Bump node-forge from 1.3.1 to 1.3.2

Real-Dev-Squad/mobile-app #531

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,657 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,537 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`