Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,705 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,643 repositories
Unique Repos (30 days):
29 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 5 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 5 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

Indragith20/canvas-draw-app #123

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Indragith20
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

nuxt/devtools #912

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nuxt
build(deps): bump node-forge from 1.3.1 to 1.3.2

make-software/casper-wallet #1269

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
make-software
Bump node-forge from 1.3.1 to 1.3.2 in /src/overview

mongulu-cm/icons-fasaha #32

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mongulu-cm
Bump node-forge from 1.3.1 to 1.3.2

GoogleCloudPlatform/pi-delivery #82

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GoogleCloudPlatform
Bump node-forge from 1.3.1 to 1.3.2

ebellakk/moviehub #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ebellakk
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

sergey-tihon/streamdeck-homebridge #56

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sergey-tihon
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /public_html/examples/react/15-react-jwt-auth

strazdinsg/web-examples #131

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 8 comments
strazdinsg
Bump node-forge from 1.3.1 to 1.3.2

wppbav/developer.wppbav.com #60

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
wppbav
Bump node-forge from 1.3.1 to 1.3.2

mamume/reactnd-project-myreads #30

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mamume
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /ui/apps/platform

stackrox/stackrox #17979

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
stackrox
Bump node-forge from 1.3.1 to 1.3.2

mptapasdas/freedemy #53

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
mptapasdas
Bump node-forge from 1.3.1 to 1.3.2

PhilippMeissner/stromberg-quotes #46

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
PhilippMeissner
Bump node-forge from 1.3.1 to 1.3.2

saeloun/miru-web #2024

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
saeloun
build(deps): bump node-forge from 1.3.1 to 1.3.2

COSCRAD/coscrad #803

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
COSCRAD
Bump node-forge from 1.3.1 to 1.3.2

kbss-cvut/react-maintenance-planner #132

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kbss-cvut
Bump node-forge from 1.3.1 to 1.3.2

iglee42/Website #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
iglee42
Bump node-forge from 1.3.1 to 1.3.2

darkliahos/personal-site #46

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
darkliahos
build(deps): bump node-forge from 1.3.1 to 1.3.2

ronamosa/ronamosa.github.io #307

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ronamosa
build(deps): bump node-forge from 1.3.1 to 1.3.2

Lookyloo/webext #22

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Lookyloo
Bump node-forge from 1.3.1 to 1.3.2

Kernix13/travel-site #42

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Kernix13
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

Chinay-Domitrix/sbcsclub.github.io #87

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
Chinay-Domitrix
build(deps): bump node-forge from 1.3.1 to 1.3.2

axone-protocol/docs #758

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
axone-protocol
Bump node-forge from 1.3.1 to 1.3.2

webceyhan/nuxt-finance-portfolio #339

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
webceyhan
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/create-react-app

RyanClementsHax/tailwindcss-themer #175

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 4 comments
RyanClementsHax
BAU: Bump node-forge from 1.3.1 to 1.3.2

govuk-one-login/onboarding-product-page #816

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
govuk-one-login
Bump node-forge from 1.3.1 to 1.3.2

thepushkarp/rupee-inflation-dashboard #53

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
thepushkarp
Bump node-forge from 1.3.1 to 1.3.2

tremor-rs/tremor-www #354

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tremor-rs
Bump node-forge from 1.3.1 to 1.3.2

blockprotocol/blockprotocol #1508

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
blockprotocol
Bump node-forge from 1.3.1 to 1.3.2

safe-fleet/ngx-translate-plugins #27

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
safe-fleet
chore(deps): bump node-forge from 1.3.1 to 1.3.2

godwokenrises/godwoken-doc #255

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
godwokenrises
Bump node-forge from 1.3.1 to 1.3.2

General-Iroh32/dzovani.codes #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
General-Iroh32
Bump node-forge from 1.3.1 to 1.3.2

Neuro-ID/neuroid-reactnative-sdk #241

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Neuro-ID
Bump node-forge from 1.3.1 to 1.3.2

REAN-Foundation/rean-bot-wrapper #794

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
REAN-Foundation
Bump node-forge from 1.3.1 to 1.3.2

kwing25/Women-Who-ve-Changed-Tech #92

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kwing25
build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs

crypto-org-chain/cosmos-sdk #1742

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
crypto-org-chain
Bump node-forge from 1.3.1 to 1.3.2 in /website

fzyzcjy/flutter_rust_bridge #2939

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
fzyzcjy
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

algolia/api-clients-automation #5684

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
algolia
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

Chinay-Domitrix/kotlin-web-site #166

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Chinay-Domitrix
Bump node-forge from 1.3.1 to 1.3.2 in /client

RiteshK-611/WebAR_Furnishing #73

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
RiteshK-611
Bump node-forge from 1.3.1 to 1.3.2

joutria/react-apps #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
joutria
Bump node-forge from 1.3.1 to 1.3.2

TeamUltroid/teamultroid.github.io #5

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
TeamUltroid
Bump node-forge from 1.3.1 to 1.3.2

AdrianNadeau/gratitudetoday #26

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
AdrianNadeau
Bump node-forge from 1.3.1 to 1.3.2

fossadev/fossabot-docs #96

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
fossadev
Bump node-forge from 1.3.1 to 1.3.2

leechaojie/gluttonous-snake #32

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
leechaojie
Bump node-forge from 1.3.1 to 1.3.2

tmkn/packageanalyzer-docs #170

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tmkn
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /shelfe-react

Lennoard/Shelfe #78

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Lennoard
Bump node-forge from 1.3.1 to 1.3.2

decipad/decipad #7247

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
decipad
chore(deps): bump node-forge from 1.3.1 to 1.3.2

patternfly/patternfly-quickstarts #434

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
patternfly
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

theo-mesnil/WhatToWatch #198

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
theo-mesnil
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,657 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,537 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)