`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,708 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
4,645 repositories

Unique Repos (30 days):
28 repositories

Security Advisories

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 12 hours ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

node-forge has ASN.1 Unbounded Recursion

GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 6 days ago

### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

OmarTaherSaad/Thanawya-Helwa #51

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

sannp/Twitter-bot #36

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /webclient

allen-cell-animated/agave #302

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Eivy/natureremo-webapp #30

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

RadoslavPavlinchov/mern-exercise-tracker #47

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Jhersyvb/react-ecommerce #18

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

valeriosillari/valerio-portfolio #60

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

hackolade/ScyllaDB #83

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /explorer

terryspitz/dactyl-font #53

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /packages/core

GoogleChromeLabs/bubblewrap #977

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Edmund-Loh/decrypt_jwe #4

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

ryfey/robofriends #11

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

brendanberg/dbn #17

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /lessons-standalone

lfdantoni/angular-course #75

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

mkayander/react-cartridge-management #68

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /functions

lukasbuehler/pkspot #75

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /POCUploadStream/ClientApp in the npm_and_yarn group across 1 directory

GuilhermeStracini/POC-react-dotnet-UploadStream #341

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 7 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /ui

devspace-sh/devspace #3048

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

themeum/tutor #2248

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

supervons/ExploreRN #57

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

mazaraki/my-robofriends #14

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

allan8362/music_charts #114

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Starboy-Sharma/insta-post #15

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

phatbhoy67/resort #66

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

dhis2/android-settings-app #238

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /vuejs/vuejs

docker/awesome-compose #628

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /shared

GoogleCloudPlatform/datashare-toolkit #740

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore: bump node-forge from 1.3.1 to 1.3.2 in /website

open-policy-agent/gatekeeper #4274

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

codacy/codacy-eslint #4937

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /AngularHello

carloscds/Ignite2018 #120

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

solestelivingweb/client #129

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

apify/apify-docs #2115

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

ui-schema/ui-schema #263

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

arrangement-io/arrange-that-client #197

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

schwer/graphql-to-openapi #714

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

psincraian/blog #14

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

media-store-net/wpi-shortcodebuilder-vue #43

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

epicmaxco/vuestic-ui #4598

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2

jdanil/skunkworks #5820

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

Garcia-Ventures/gvtech-design #41

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

willyfromtheblock/peercoin.party #59

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

achyutjhunjhunwala/fuel-prices-ui #6

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /client

Hsien-HsiuLiao/Decentralized-Autonomous-Organization #42

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

socarlosb/c-timer #47

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /example

souvik-ghosh/react-native-create-thumbnail #137

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /web

HumanSignal/label-studio #8897

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 4 comments

build(deps): bump node-forge and react-scripts

OSLC/oslc-browser #39

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

hyperledger/besu-docs #1878

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

senzing-garage/entity-search-web-app #696

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

microsoft/fluentui-react-native #3976

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,967 (52.0%)

Merged 58 (1.0%)

Closed 2,658 (46.6%)

PR Types

Major 1,166 (20.4%)

Minor 1,538 (26.9%)

Patch 2,926 (51.3%)

Removal 43 (0.8%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`