Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 3 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 5 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /src/pybind/mgr/dashboard/frontend

avanthakkar/ceph #29

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
avanthakkar
Bump node-forge from 1.3.1 to 1.3.2

corscheid/fwew-react #63

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
corscheid
Bump node-forge from 1.3.1 to 1.3.2 in /report-react

IBMa/equal-access #2422

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
IBMa
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

vannizhang/react-redux-boilerplate #41

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
vannizhang
Bump node-forge from 1.3.1 to 1.3.2 in /functions

mst-ka/mst-ka-site #269

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mst-ka
Bump node-forge from 1.3.1 to 1.3.2

centreon/centreon-documentation #4874

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
centreon
Bump node-forge from 1.3.1 to 1.3.2 in /tests/codeception/_data/themes/custom_twentytwenty

publishpress/PublishPress-Authors #2187

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
publishpress
Bump node-forge from 1.3.1 to 1.3.2

antwaunjohnson/antwaun-johnson-react-portfolio #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
antwaunjohnson
Bump node-forge from 1.3.1 to 1.3.2 in /apps/solidstart-app

ffmpegwasm/ffmpeg.wasm #915

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ffmpegwasm
Bump node-forge from 1.3.1 to 1.3.2

jiangzhhhh/share-bill-calc #32

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jiangzhhhh
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /ui

GoogleCloudPlatform/spanner-migration-tool #1239

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
GoogleCloudPlatform
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

alexandrabaturina/travel-planner #72

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
alexandrabaturina
Bump node-forge from 1.3.1 to 1.3.2

PRIMUS209/Weather #14

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
PRIMUS209
Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

kytta/share2fedi #125

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
kytta
Bump node-forge from 1.3.1 to 1.3.2 in /part1/unicafe

Cursea/FullStackOpen #273

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Cursea
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

pay-theory/payment-components #417

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pay-theory
Bump node-forge from 1.3.1 to 1.3.2

xinqilin/Vue-Palyground #71

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
xinqilin
Bump node-forge from 1.3.1 to 1.3.2

rohit-gohri/redocusaurus #430

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
rohit-gohri
chore(deps): bump node-forge from 1.3.1 to 1.3.2

BristolSTA/uobtheatre-web #1077

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
BristolSTA
Bump node-forge from 1.3.1 to 1.3.2

EricDevBA/covid19-Angular #36

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
EricDevBA
Bump node-forge from 1.3.1 to 1.3.2

brombaut/benrombautca #462

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
brombaut
chore(deps): bump node-forge from 1.3.1 to 1.3.2

edurne85/wowfinder #1144

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
edurne85
Bump node-forge from 1.3.1 to 1.3.2

piyotaicho/JOED #48

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
piyotaicho
Bump node-forge from 1.3.1 to 1.3.2 in /web

trinhdaiphuc/GRPC-Chat #57

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
trinhdaiphuc
Bump node-forge from 1.3.1 to 1.3.2 in /fabtechs-nuxt/fabtechs-main

Fabtechs/fabtechs.github.io #8

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Fabtechs
Bump node-forge from 1.3.1 to 1.3.2 in /ui/menu-website

dgee2/Menu #789

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
dgee2
Bump node-forge from 1.3.1 to 1.3.2

ZehaIrawan/Uila_Serverless #94

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ZehaIrawan
Bump node-forge from 1.3.1 to 1.3.2 in /Frontend

wonyongHwang/kopoBlockChainVote #60

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
wonyongHwang
Bump node-forge from 1.3.1 to 1.3.2

Remondo02/portfolio #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Remondo02
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /TokanPages.ClientApp

TomaszKandula/TokanPages #1505

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
TomaszKandula
Bump node-forge from 1.3.1 to 1.3.2

ZehaIrawan/todo-serverless-express #36

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ZehaIrawan
Bump node-forge from 1.3.1 to 1.3.2

xiemingzhi/vue-nuxt-app #33

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
xiemingzhi
Bump node-forge from 1.3.1 to 1.3.2 in /website

authgear/authgear-sdk-js #402

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
authgear
Bump node-forge from 1.3.1 to 1.3.2 in /packages/webpacker

GetxoUdala/decidim-getxo #108

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GetxoUdala
Bump node-forge from 1.3.1 to 1.3.2 in /tests/e2e-playwright

rtCamp/embed-google-drive #38

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
rtCamp
Bump node-forge from 1.3.1 to 1.3.2

8tentaculos/jsPacman #41

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
8tentaculos
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /mocko-ui

mocko-app/mocko #129

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mocko-app
build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2 in /Frontend

TrisNol/Word-Cloud #60

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
TrisNol
Bump node-forge from 1.3.1 to 1.3.2 in /VAMobile

department-of-veterans-affairs/va-mobile-app #12060

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
department-of-veterans-affairs
Bump node-forge from 1.3.1 to 1.3.2 in /client

docusign/sample-app-insurance-python #87

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
docusign
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /test/go/test-wallet_connect/modal

status-im/status-app #19413

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
status-im
Bump node-forge from 1.3.1 to 1.3.2

SeonJK/football-manager #29

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
SeonJK
build(deps): bump node-forge from 1.3.1 to 1.3.2

saileshbro/covid-tracker #348

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
saileshbro
Bump node-forge from 1.3.1 to 1.3.2 in /navigation

Victor7095/react-native-udemy #164

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
Victor7095
Chore(deps): Bump node-forge from 1.3.1 to 1.3.2

tarlepp/angular-ngrx-frontend #3661

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
tarlepp
build(deps): bump node-forge from 1.3.1 to 1.3.2

kallyas/cinema-app #199

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kallyas
Bump node-forge from 1.3.1 to 1.3.2 in /client

daxAKAhackerman/XSS-Catcher #330

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
daxAKAhackerman
chore(deps): bump node-forge from 1.3.1 to 1.3.2

deity-io/falcon-platform-docs #323

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
deity-io
Bump node-forge from 1.3.1 to 1.3.2 in /basic-frontend-app

thecoder8890/spring-react-combo-app #16

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
thecoder8890
Bump node-forge from 1.3.1 to 1.3.2

tighten/novapackages #392

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
tighten
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,967 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,538 (26.9%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)