Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 6 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 16 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 6 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

iqbalperkasa/iqbalperkasa.com #38

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
iqbalperkasa
Bump node-forge from 1.3.1 to 1.3.2

DinoChiesa/jwt-webtool #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
DinoChiesa
Bump node-forge from 1.3.1 to 1.3.2

dcgw/super-metronome-hero #154

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
dcgw
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

NCIEVS/evs-explore #386

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
NCIEVS
Bump node-forge from 1.3.1 to 1.3.2

MeAkib/todo-list-by-react #6

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MeAkib
Bump node-forge from 1.3.1 to 1.3.2 in /cursos-alura/angular/fundamentos/alurapic

jairosousa/cursos-alura #137

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jairosousa
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

yamadashy/slack-channels-grouping #266

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
yamadashy
Bump node-forge from 1.3.1 to 1.3.2 in /angular/path-location-strategy

lyticus/examples #240

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
lyticus
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /admin-frontend

City-of-Vantaa-SmartLab/Mobiilinutakortti #487

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
City-of-Vantaa-SmartLab
Bump node-forge from 1.3.1 to 1.3.2

julienw/webextension-build-script #139

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
julienw
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend/src/angular

Angular2Guy/AngularPwaMessenger #71

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Angular2Guy
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

IoannisDrim/movies-js-demo-app #37

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
IoannisDrim
Bump node-forge from 1.3.1 to 1.3.2

bfaulk96/brandon-web #52

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
bfaulk96
Bump node-forge from 1.3.1 to 1.3.2

wviveiro/use-loader #55

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
wviveiro
Bump node-forge from 1.3.1 to 1.3.2

JermaSites/jerma-joke-client #27

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
JermaSites
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /functions

kleva-j/Mini_Netflix_Backend #183

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kleva-j
Bump node-forge from 1.3.1 to 1.3.2 in /cantinho-da-leitura

cecisousa/reprograma-cantinho-da-leitura #43

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
cecisousa
Bump node-forge from 1.3.1 to 1.3.2 in /web/wp-content/plugins/live-stream-gate-block

linuxfoundation/lfevents #985

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
linuxfoundation
Bump node-forge from 1.3.1 to 1.3.2

polarityio/google-drive #15

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
polarityio
Bump node-forge from 1.3.1 to 1.3.2

Consensys/doc.teku #694

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Consensys
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs/main

mooltiverse/nyx #383

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mooltiverse
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

typegoose/typegoose #1016

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
typegoose
Bump node-forge from 1.3.1 to 1.3.2

rdak/beer #34

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rdak
Bump node-forge from 1.3.1 to 1.3.2 in /block

superwebshare/super-web-share #70

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
superwebshare
Bump node-forge from 1.3.1 to 1.3.2

keldaanCommunity/pokemonAutoChess #3563

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
keldaanCommunity
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Lucs1590/Personal_Site #595

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Lucs1590
chore(deps): bump node-forge from 1.3.1 to 1.3.2

smart-village-solutions/smart-village-app-app #1417

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
smart-village-solutions
build(deps): bump node-forge from 1.3.1 to 1.3.2

azuwis/zigbee2mqtt-networkmap #106

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
azuwis
Bump node-forge from 1.3.1 to 1.3.2 in /moped-editor

cityofaustin/atd-moped #1724

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
cityofaustin
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

damonsk/onlinewardleymaps #265

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
damonsk
build(deps): bump node-forge from 1.3.1 to 1.3.2

openedx/frontend-app-gradebook #527

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
openedx
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /example

react-native-cameraroll/react-native-cameraroll #710

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
react-native-cameraroll
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/classic

facebook/docusaurus #11575

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
facebook
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /pkg/ui/v1beta1/frontend

kubeflow/katib #2593

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
kubeflow
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/react-multipage-funnel

BuilderIO/builder #4193

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
BuilderIO
Bump node-forge from 1.3.1 to 1.3.2 in /ts

GoogleCloudPlatform/dialogflow-integrations #298

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GoogleCloudPlatform
Bump node-forge from 1.3.1 to 1.3.2

communityinclusion/communityinclusion.org #56

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
communityinclusion
Bump node-forge from 1.3.1 to 1.3.2

azmainadel/react-tetris #12

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
azmainadel
Bump node-forge from 1.3.1 to 1.3.2 in /ESP32-Scheduler/web-ui

Adipa-G/IOT #13

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Adipa-G
chore(deps): bump node-forge from 1.3.1 to 1.3.2

mojaloop/connection-manager-api #168

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mojaloop
Bump node-forge from 1.3.1 to 1.3.2 in /static-webapp

onlexnet/sin-net-reports #328

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
onlexnet
Chore(deps): Bump node-forge from 1.3.1 to 1.3.2

george-haddad/bitcoin-price-index #258

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
george-haddad
Bump node-forge from 1.3.1 to 1.3.2 in /cloud-functions/analysis

Vizzuality/mangrove-atlas #1309

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Vizzuality
Bump node-forge from 1.3.1 to 1.3.2

toptal/picasso #4867

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
toptal
build(deps): bump node-forge from 1.3.1 to 1.3.2

wepublish/wepublish #2278

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
wepublish
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Automattic/newspack-theme #2600

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 6 comments
Automattic
Bump node-forge from 1.3.1 to 1.3.2

smart-football-table/smart-football-table-ui #511

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
smart-football-table
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /packages/openapi-fetch

openapi-ts/openapi-typescript #2535

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
openapi-ts
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

rero/ng-core #768

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
rero
Bump node-forge from 1.3.1 to 1.3.2

AuScope/AuScope-Portal-UI #521

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
AuScope
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,967 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,538 (26.9%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)