Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 1 hour ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 5 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

casteroid/webcam-mirror #28

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
casteroid
chore(deps): bump node-forge from 1.3.1 to 1.3.2

jonatasoli/fast-ecommerce-front #266

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
jonatasoli
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /ui/app/AppLayouts/Wallet/services/dapps/sdk

status-im/status-desktop #19414

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
status-im
Bump node-forge from 1.3.1 to 1.3.2

homebridge-plugins/homebridge-lutron-caseta-leap #199

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
homebridge-plugins
Bump node-forge from 1.3.1 to 1.3.2

chafan-dev/chafan-pwa #454

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
chafan-dev
chore: bump node-forge from 1.3.1 to 1.3.2

tobiasbueschel/software-engineering-excellence #110

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
tobiasbueschel
Bump node-forge from 1.3.1 to 1.3.2

tiffanybowers/angular-project #73

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
tiffanybowers
Bump the npm_and_yarn group across 2 directories with 2 updates

leighmacdonald/gbans #651

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
leighmacdonald
build(deps): bump node-forge from 1.3.1 to 1.3.2

AlaskaAirlines/AuroDocsSite #401

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
AlaskaAirlines
chore(deps): bump node-forge from 1.3.1 to 1.3.2

mojaloop/auth-service #168

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mojaloop
Bump node-forge from 1.3.1 to 1.3.2 in /src/channels/chat

saurabharch/rollout #579

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
saurabharch
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /sandbox/telemed-app/backend/video-conferencing-service

sourcefuse/loopback4-microservice-catalog #2373

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sourcefuse
Bump node-forge from 1.3.1 to 1.3.2

Ciunkos/koronakrulow #70

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Ciunkos
chore(deps): bump node-forge from 1.3.1 to 1.3.2

linuxfoundation/easycla-contributor-console #488

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
linuxfoundation
Bump node-forge from 1.3.1 to 1.3.2

Adrinlol/landy-react-template #92

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Adrinlol
Bump node-forge from 1.3.1 to 1.3.2 in /documentation

permitio/opal #849

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
permitio
npm-backend: bump node-forge from 1.3.1 to 1.3.2 in /sources/packages/backend

bcgov/SIMS #5419

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
bcgov
chore(deps): Bump node-forge from 1.3.1 to 1.3.2

jamesaspence/listr #75

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
jamesaspence
Bump node-forge from 1.3.1 to 1.3.2

stewie1570/leaf-validator #214

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
stewie1570
Bump node-forge from 1.3.1 to 1.3.2 in /Website

craigspaterson/MMOGardenTracker #41

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
craigspaterson
Bump node-forge from 1.3.1 to 1.3.2

hyomiTheTech/eui_hyomi__website #31

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hyomiTheTech
build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

microsoft/FluidHelloWorld #557

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
microsoft
Bump node-forge from 1.3.1 to 1.3.2

almond-bongbong/give-me-a-token #32

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
almond-bongbong
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend

softrams/bulwark #1419

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
softrams
Bump node-forge from 1.3.1 to 1.3.2

To2rk/vuepress-blog #165

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
To2rk
Bump node-forge from 1.3.1 to 1.3.2

mbbbackus/benbackus #27

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
mbbbackus
Bump node-forge from 1.3.1 to 1.3.2

scm-manager/scm-manager #2291

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
scm-manager
chore(deps): bump node-forge from 1.3.1 to 1.3.2

oneminch/Deadlines #60

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
oneminch
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /sandbox/chat-notification-socketio-example/services/chat-service

sourcefuse/loopback4-microservice-catalog #2372

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
sourcefuse
chore(deps): bump node-forge from 1.3.1 to 1.3.2

NewKrok/newkrok.com #9

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
NewKrok
Bump node-forge from 1.3.1 to 1.3.2

ndnci/mentorjs #717

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
ndnci
Bump node-forge from 1.3.1 to 1.3.2

Kovah/LinkAce-Website #129

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Kovah
Bump node-forge from 1.3.1 to 1.3.2

smakthe/mainstreet #68

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
smakthe
Bump node-forge from 1.3.1 to 1.3.2

tams-cso/tams-club-cal #587

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
tams-cso
Bump node-forge from 1.3.1 to 1.3.2 in /ui/ui-frontend

ProgrammeVitam/vitam-ui #3391

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ProgrammeVitam
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /04-react/react-00

brennanbrown/evolveu #255

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
brennanbrown
Bump node-forge from 1.3.1 to 1.3.2 in /client

escobot/random-quote-machine #47

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
escobot
Bump node-forge from 1.3.1 to 1.3.2

ihunter/jerma-clips #20

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ihunter
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

guanruihua/guanruihua.github.io #47

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
guanruihua
Bump node-forge from 1.3.1 to 1.3.2

robbiebyrd/classicy #109

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
robbiebyrd
Bump node-forge from 1.3.1 to 1.3.2

YordanDobrev97/MusicFy #38

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
YordanDobrev97
Bump node-forge from 1.3.1 to 1.3.2

QutEcoacoustics/workbench-client #2546

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
QutEcoacoustics
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /web

fandredev/ui-clone-githubdesktop #38

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
fandredev
Bump node-forge from 1.3.1 to 1.3.2 in /QIQO.WS.POC.Main/ClientApp

rdrrichards/QIQO.WS.POC.Main #73

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rdrrichards
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

skyYaga/skdvin-webapp #1951

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
skyYaga
Bump node-forge from 1.3.1 to 1.3.2

pet-projects-in/news-app #131

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
pet-projects-in
Bump node-forge from 1.3.1 to 1.3.2 in /tests/e2e-playwright

rtCamp/search-with-google #59

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
rtCamp
Bump node-forge from 1.3.1 to 1.3.2

zoom/meetingsdk-angular-sample #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
zoom
Bump node-forge from 1.3.1 to 1.3.2

olibyte/tourOfHeroes #56

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
olibyte
build(deps): bump node-forge from 1.3.1 to 1.3.2

hawtio/hawtio-next #1823

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
hawtio
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,967 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,538 (26.9%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)