Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 5 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 6 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 5 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2 in /src

tl-its-umich-edu/remote-office-hours-queue #711

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
tl-its-umich-edu
Bump node-forge from 1.3.1 to 1.3.2

olibyte/reactGraphQLDynamoDBAmplify-demo #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
olibyte
Bump node-forge from 1.3.1 to 1.3.2 in /context

hubmapconsortium/portal-ui #3869

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
hubmapconsortium
chore(deps): bump node-forge from 1.3.1 to 1.3.2

secretlint/secretlint #1325

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
secretlint
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

dennis2018/Mongo-DB-and-react-dukani-frontend-UI-design #84

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dennis2018
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

mrpelz/iot-webinterface #9

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mrpelz
Bump node-forge from 1.3.1 to 1.3.2 in /docs

chainapsis/keplr-wallet #1701

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
chainapsis
build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs

allinbits/cosmos-sdk #2182

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
allinbits
Bump node-forge from 1.3.1 to 1.3.2 in /Client/React

ragingo/RagiShark #49

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
ragingo
build(deps): bump node-forge from 1.3.1 to 1.3.2

saileshbro/monsters-rolodex #185

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
saileshbro
Bump node-forge from 1.3.1 to 1.3.2

taylorreece/blog #65

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
taylorreece
chore(deps): bump node-forge from 1.3.1 to 1.3.2

openedx/frontend-app-authoring #2708

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
openedx
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Kong/swrv #388

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Kong
Bump node-forge from 1.3.1 to 1.3.2

sergeivassiljev/chat #8

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sergeivassiljev
Bump node-forge from 1.3.1 to 1.3.2

monkiki/onsen-test #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
monkiki
Bump node-forge from 1.3.1 to 1.3.2

guswawan/SocialNetwork #60

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
guswawan
build(deps): bump node-forge from 1.3.1 to 1.3.2

ever-co/ever-traduora #501

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 6 comments
ever-co
Bump node-forge from 1.3.1 to 1.3.2 in /client

jbt-it/neomdb #632

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jbt-it
Bump node-forge from 1.3.1 to 1.3.2

nasjones/quiz-maker-app #6

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nasjones
Bump node-forge from 1.3.1 to 1.3.2

olibyte/messageboard-frontend #53

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
olibyte
Bump node-forge from 1.3.1 to 1.3.2 in /docs

PalisadoesFoundation/talawa #3028

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
PalisadoesFoundation
build(deps): bump node-forge from 1.3.1 to 1.3.2

Availity/availity-starter-react #59

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Availity
Bump node-forge from 1.3.1 to 1.3.2

thainagneves/camaleflix #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
thainagneves
Bump node-forge from 1.3.1 to 1.3.2

zarkasias/smartform #15

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
zarkasias
Bump node-forge from 1.3.1 to 1.3.2 in /part7/country-hook

betocostadev/fullstackopen #862

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
betocostadev
Bump node-forge from 1.3.1 to 1.3.2

lunarised/vue-portfolio #62

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
lunarised
Bump node-forge from 1.3.1 to 1.3.2 in /llm-recs/llm-recs-webclient

PAIR-code/recommendation-rudders #121

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
PAIR-code
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /client

muke1908/chat-e2ee #410

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
muke1908
Bump node-forge and webpack-dev-server

codio/parsons-puzzle-ui #65

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
codio
Bump node-forge from 1.3.1 to 1.3.2

project-blurple/blurple-web #57

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
project-blurple
Bump node-forge from 1.3.1 to 1.3.2 in /packages/api

LiteFarmOrg/LiteFarm #3938

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
LiteFarmOrg
Bump node-forge from 1.3.1 to 1.3.2 in /packages/share

parsecph/clobbr #224

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
parsecph
Bump node-forge from 1.3.1 to 1.3.2

olibyte/mern-blog-starter #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
olibyte
Bump node-forge from 1.3.1 to 1.3.2

scm-manager/scm-editor-plugin #95

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
scm-manager
Bump node-forge from 1.3.1 to 1.3.2

cerbin1/looping-tasks_v2 #42

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
cerbin1
Bump node-forge from 1.3.1 to 1.3.2 in /docusaurus

coding-kitties/investing-algorithm-framework #339

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
coding-kitties
chore(deps): bump node-forge from 1.3.1 to 1.3.2

microsoft/playwright.dev #1932

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
microsoft
chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /docs in the npm_and_yarn group across 1 directory

piscinajs/piscina #933

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
piscinajs
Bump node-forge from 1.3.1 to 1.3.2

tlarrain/santo-domingo-shifts #47

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
tlarrain
Bump node-forge from 1.3.1 to 1.3.2

MasterKale/SimpleWebAuthn-homepage #82

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MasterKale
chore(deps): bump node-forge from 1.3.1 to 1.3.2

sourcefuse/loopback4-vault #163

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sourcefuse
Bump node-forge from 1.3.1 to 1.3.2 in /angular/app/frontend

ashishbindra2/myweb #11

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ashishbindra2
Bump node-forge from 1.3.1 to 1.3.2

marsou001/weather-app-react #17

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
marsou001
Bump node-forge from 1.3.1 to 1.3.2 in /client

sksaju/expense-tracker #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sksaju
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

dai-shi/react-tracked #252

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
dai-shi
Bump node-forge from 1.3.1 to 1.3.2

savepong/ionic-react-photo-gallery #21

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
savepong
chore(deps): bump node-forge from 1.3.1 to 1.3.2

saileshbro/recepie-app #149

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
saileshbro
Bump node-forge from 1.3.1 to 1.3.2

markelliot/letters-game #174

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
markelliot
Bump node-forge from 1.3.1 to 1.3.2

auxcoder/gluboard-angular #62

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
auxcoder
build(deps): bump node-forge from 1.3.1 to 1.3.2

Availity/availity-starter-typescript #42

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Availity
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,967 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,538 (26.9%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)