`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
3,780 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
3,418 repositories

Unique Repos (30 days):
231 repositories

Security Advisories

node-forge has ASN.1 Unbounded Recursion

GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 3 months ago • updated 17 days ago

### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 3 months ago • updated 12 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 11 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 3 directories with 11 updates

ANT0071/parcel #2

1.3.1 → 1.3.2 Patch PR

Closed 17 days ago 1 comment

Bump the npm_and_yarn group across 13 directories with 22 updates

ANT0071/activepieces #8

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

Bump the npm_and_yarn group across 69 directories with 12 updates

Malhad/cli-microsoft365 #3

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

baca89/ioBroker.gira-homeserver #65

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

baca89/ioBroker.ipverso2n #24

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

chore(deps): Bump the npm_and_yarn group across 25 directories with 15 updates

aegntic/ae-co-system #8

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3

Andrey1914/portfolio-illustrator #34

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 29 updates

ccwu0918/pollinations #6

1.3.1 → 1.3.3 Patch PR

Closed 17 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

AKJUS/HeaderEditor #20

1.3.1 → 1.3.3 Patch PR

Open 17 days ago 1 comment

Bump node-forge from 1.3.1 to 1.3.3 in /swap-v2-next-app

somatothing/0x-examples #11

1.3.1 → 1.3.3 Patch PR

Open 17 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 16 updates

https-gitcom/angular-rock-paper-scissors-sample #13

1.3.1 → 1.3.3 Patch PR

Open 17 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 12 updates

syedj17/react-native-reanimated #3

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore(deps): Bump the npm_and_yarn group across 9 directories with 26 updates

ssushant0011/backstage-plugins-for-aws #3

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore: bump the npm_and_yarn group across 4 directories with 14 updates

JoftheV/onchainkit #2

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

NatYou345/xen-orchestra #8

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 15 directories with 23 updates

UniversalStandards/activepieces #8

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 12 updates

OurDotNetOrganization/RandomAPIApp #18

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

deps: bump the npm_and_yarn group across 1 directory with 3 updates

kallhoffa/argbase #17

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 26 updates

CrazyDubya/storybook #5

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 31 updates

GlacierEQ/sourcegraph-public-snapshot #6

0.9.0 → 0.9.2 Patch PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 3 directories with 23 updates

alialobidm/rrweb #2

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 2 comments

build(deps): bump the npm_and_yarn group across 34 directories with 17 updates

hyperledger-cacti/cacti #4119

1.3.1 → 1.3.2 Patch PR

Closed 18 days ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 19 updates

q1blue/angular-cli #46

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 2 comments

Bump the npm_and_yarn group across 5 directories with 18 updates

sizzlebop/storybook #3

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 12 updates

kingyx3/msp2 #24

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 19 updates

JSTONE1111/sui #13

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 17 updates

AKJUS/create-hyperweb-app #15

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 22 updates

CxsLucyfer/theme-tools #24

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 5 directories with 18 updates

mybusybee-inc/storybook #3

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

build(deps): bump the npm_and_yarn group across 7 directories with 15 updates

suissa/openreplay #5

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

needaccforwhonix/genai-toolbox #3

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 13 updates

YoutacRandS-VA/line-bot-sdk-nodejs #2

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 4 comments

Bump the npm_and_yarn group across 6 directories with 12 updates

ANT0071/azure-sdk-for-js #3

1.3.1 → 1.3.2 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 7 directories with 32 updates

balajirajput96/generative-ai-docs #3

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 15 directories with 24 updates

UniversalStandards/activepieces #6

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

ANT0071/rnx-kit #2

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 8 updates

Sai-Dangade777/Personal-Finance-Manager #15

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.3 in /examples/classic-typescript

ivan09069/docusaurus #19

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 11 updates

ANT0071/docusaurus #2

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 9 updates

Atul-Vishwakarma9/ChatSphere #2

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 2 comments

build(deps): bump the npm_and_yarn group across 4 directories with 19 updates

ASISBusiness/sui #2

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 3 comments

chore(deps): bump the npm_and_yarn group across 2 directories with 7 updates

fabriziosalmi/wildbox #59

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 12 updates

hatsuyuki280/ShiguReader #38

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 3 directories with 10 updates

MATHEESHA2/ToDoBackend #3

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 18 updates

LogicaldataCo/docusaurus #4

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Build(deps): Bump the npm_and_yarn group across 2 directories with 9 updates

KnownTeach616/mern-todo-app #2

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

build(deps): bump the npm_and_yarn group across 3 directories with 21 updates

jgeofil/langflow #3

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 6 directories with 18 updates

alokkulkarni/backstage #2

1.3.1 → 1.3.3 Patch PR

Closed 18 days ago 1 comment

Bump the npm_and_yarn group across 4 directories with 12 updates

stephanelkhoury/harmonix #7

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 2 directories with 17 updates

abrahem79/studio #3

1.3.1 → 1.3.3 Patch PR

Open 18 days ago 2 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

11

Active advisories

HIGH 5

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` almost 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,220 (58.7%)

Merged 58 (1.5%)

Closed 1,478 (39.1%)

PR Types

Removal 13 (0.3%)

Minor 73 (1.9%)

Major 1,014 (26.8%)

Patch 2,649 (70.1%)

node-forge

Security Advisories

node-forge has ASN.1 Unbounded Recursion

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Prototype Pollution in node-forge debug API.

URL parsing in node-forge could lead to undesired behavior.

Open Redirect in node-forge

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`node-forge`