Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,707 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 5 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
Prototype Pollution in node-forge debug API.
GHSA-5rrq-pxf6-6jx5 LOW published over 4 years ago • updated about 2 months ago
### Impact The `forge.debug` API had a potential prototype pollution issue if called with untrusted input. The API was only used for internal debug...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

taehoio/notionproxy #135

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
taehoio
Bump node-forge from 1.3.1 to 1.3.2 in /ui

ONSdigital/ssdc-rm-support-tool #384

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ONSdigital
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /examples/with-electron

mheob/rsuite #129

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
mheob
Bump node-forge from 1.3.1 to 1.3.2

sskanishk/blog-frontend-vuejs #19

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
sskanishk
Bump node-forge from 1.3.1 to 1.3.2

rjNemo/football-summaries #57

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rjNemo
Bump node-forge from 1.3.1 to 1.3.2

online-go/goban #214

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
online-go
chore(deps): bump node-forge from 1.3.1 to 1.3.2

ImagingDataCommons/slim #361

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
ImagingDataCommons
chore(deps): bump node-forge from 1.3.1 to 1.3.2

island-is/island.is #20781

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
island-is
chore(deps): bump node-forge from 1.3.1 to 1.3.2

DimitriDaSilva/portfolio-website #368

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
DimitriDaSilva
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

nextcloud/officeonline #713

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
nextcloud
Bump node-forge from 1.3.1 to 1.3.2

jb923/xupreme-frontend #13

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jb923
Bump node-forge from 1.3.1 to 1.3.2 in /analysis/kernel/dashboard/frontend

google/security-research #285

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
google
Bump node-forge from 1.3.1 to 1.3.2 in /docs

finos/regular-table #242

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
finos
Bump node-forge from 1.3.1 to 1.3.2

LauraToddCodes/property-app #113

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
LauraToddCodes
chore(deps): bump node-forge from 1.3.1 to 1.3.2

dhis2/developer-portal #195

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dhis2
Bump node-forge from 1.3.1 to 1.3.2

UKHO/file-share-service-ui #353

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
UKHO
Bump node-forge from 1.3.1 to 1.3.2

jasmeetsinghbhatia/react-in-a-weekend #21

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jasmeetsinghbhatia
Bump node-forge from 1.3.1 to 1.3.2

opensearch-project/OpenSearch-Dashboards #10982

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 6 comments
opensearch-project
Bump node-forge from 1.3.1 to 1.3.2

katereggaAlex/iDeliver #28

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
katereggaAlex
Bump node-forge from 1.3.1 to 1.3.2

wultra/react-native-powerauth-mobile-sdk #303

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
wultra
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Piotr1215/cloudrumble #510

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Piotr1215
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /src/portal/app-swagger-ui

container-registry/harbor-next #81

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
container-registry
Bump node-forge from 1.3.1 to 1.3.2

jimmysawczuk/mastermind #32

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jimmysawczuk
Bump node-forge from 1.3.1 to 1.3.2 in /src/functions

cpinitiative/usaco-guide #5765

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
cpinitiative
Bump node-forge from 1.3.1 to 1.3.2 in /docusaurus

bangsluke/bangsluke.github.io #571

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
bangsluke
Bump node-forge from 1.3.1 to 1.3.2 in /client

dorward/pdq-dice-react #862

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
dorward
Bump node-forge from 1.3.1 to 1.3.2 in /packages/gen-ai/frontend

opendatahub-io/odh-dashboard #5562

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
opendatahub-io
Bump node-forge from 1.3.1 to 1.3.2 in /header

jspolsky/queer-burners #98

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
jspolsky
Chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

nextcloud/integration_reddit #107

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
nextcloud
Bump node-forge from 1.3.1 to 1.3.2

pixelsomatic/pixelsomatic #58

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pixelsomatic
Bump node-forge from 1.3.1 to 1.3.2

yoriiis/abtasty-debugger #55

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
yoriiis
Bump node-forge from 1.3.1 to 1.3.2

sannp/ecomm-react #32

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sannp
Bump node-forge from 1.3.1 to 1.3.2 in /v2/rscg_examples_site

ignatandrei/RSCG_Examples #421

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ignatandrei
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /angular

milobella/application-web #1064

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
milobella
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /packages/docs

temporalio/sdk-typescript #1841

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
temporalio
Bump node-forge from 1.3.1 to 1.3.2

scholtz/wallet #130

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
scholtz
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

LironEr/bundlemon #254

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
LironEr
build(deps): bump node-forge from 1.3.1 to 1.3.2

wireui/wireui #1120

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
wireui
Bump node-forge from 1.3.1 to 1.3.2 in /docusaurus-docs

dgraph-io/dgraph-docs #714

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
dgraph-io
Bump node-forge from 1.3.1 to 1.3.2

willyfromtheblock/peercoin.rip #53

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
willyfromtheblock
chore(deps): bump node-forge from 1.3.1 to 1.3.2

TriPSs/nx-extend #410

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
TriPSs
Bump node-forge from 1.3.1 to 1.3.2

jbrooksuk/artisan.page #285

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jbrooksuk
Bump node-forge from 1.3.1 to 1.3.2

WebJamApps/CollegeLutheran #654

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
WebJamApps
chore(deps): bump node-forge from 1.3.1 to 1.3.2

HyunmoAhn/hyunmoahn.github.io #63

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
HyunmoAhn
Bump node-forge from 1.3.1 to 1.3.2

asyncLucas/WhoAmI #67

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
asyncLucas
Bump node-forge from 1.3.1 to 1.3.2

verbb/formie #2645

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
verbb
Bump node-forge from 1.3.1 to 1.3.2

nobio/timetracker-ui #72

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
nobio
Bump node-forge from 1.3.1 to 1.3.2

cob/cob-cli #105

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
cob
chore(deps): bump node-forge from 1.3.1 to 1.3.2

mvrlin/nuxt-viewport #98

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mvrlin
chore(deps): Bump node-forge from 1.3.1 to 1.3.2

EDusik/portfolio #75

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
EDusik
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,967 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,538 (26.9%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)