Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 6 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 17 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated 6 days ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

nextcloud/twofactor_webauthn #907

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
nextcloud
Bump node-forge from 1.3.1 to 1.3.2 in /back-button

mihailgaberov/data-structures-and-algorithms #156

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mihailgaberov
Bump node-forge from 1.3.1 to 1.3.2 in /nav-app

mitre-attack/attack-navigator #712

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
mitre-attack
Bump node-forge from 1.3.1 to 1.3.2

capitalone/acronym-decoder #134

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
capitalone
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

brownben/munro #1185

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
brownben
Bump node-forge from 1.3.1 to 1.3.2

rancher/dashboard #16051

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
rancher
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /.github/workflows/scripts/functions

firebase/flutterfire #17882

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
firebase
Bump node-forge from 1.3.1 to 1.3.2

s0hv/playlist-checker-website #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
s0hv
Bump node-forge from 1.3.1 to 1.3.2

dzvilius/vilius-website #25

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
dzvilius
Build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

nextcloud/cookbook #2926

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
nextcloud
Bump node-forge from 1.3.1 to 1.3.2

blainegarrett/localm-org #21

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
blainegarrett
Bump node-forge from 1.3.1 to 1.3.2 in /web/wp-content/plugins/image-box

linuxfoundation/lfevents #984

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
linuxfoundation
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

jon77p/jonprentice.me #1149

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jon77p
Bump node-forge from 1.3.1 to 1.3.2

mkoskim/mawejs #377

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mkoskim
Bump node-forge from 1.3.1 to 1.3.2

itachi1706/GAssist-TG-Bot #94

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
itachi1706
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /blog

BboyAkers/ReactProjects #675

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
BboyAkers
Bump node-forge from 1.3.1 to 1.3.2

peterajones/list-items-UI-mockup #11

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
peterajones
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

opensource-workshop/connect-cms #2307

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
opensource-workshop
Bump node-forge from 1.3.1 to 1.3.2

react-native-tvos/react-native-tvos #1020

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
react-native-tvos
Bump node-forge from 1.3.1 to 1.3.2 in /jbrowse

BimberLab/DiscvrLabKeyModules #361

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
BimberLab
Bump node-forge from 1.3.1 to 1.3.2

MALSync/MALSync #3455

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
MALSync
Bump node-forge from 1.3.1 to 1.3.2

warkentien2/warkentien2 #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
warkentien2
Bump node-forge from 1.3.1 to 1.3.2

kaotisk-hund/create-react-app-functions #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
kaotisk-hund
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Automattic/newspack-ads #1006

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 5 comments
Automattic
Bump node-forge from 1.3.1 to 1.3.2 in /src/main/nodejs

fcrespel/karaplan #281

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
fcrespel
Bump node-forge from 1.3.1 to 1.3.2

cmdalbem/ciclomapa #105

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
cmdalbem
Bump node-forge from 1.3.1 to 1.3.2 in /lessons-module

lfdantoni/angular-course #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
lfdantoni
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

MasatoMakino/imagemin-parameter-report #285

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
MasatoMakino
Bump node-forge from 1.3.1 to 1.3.2

EmmanuelTsouris/media-browser #62

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
EmmanuelTsouris
Bump node-forge from 1.3.1 to 1.3.2 in /src/design-system/docs

rainbow-me/rainbow #6953

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rainbow-me
Bump node-forge from 1.3.1 to 1.3.2

Vitorspk/docker-react #19

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Vitorspk
Bump node-forge from 1.3.1 to 1.3.2

MusicalPatterns/pattern-template #53

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MusicalPatterns
Bump node-forge from 1.3.1 to 1.3.2 in /console-webapp

faizulho/nomulus #843

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
faizulho
Bump node-forge from 1.3.1 to 1.3.2

onFilm/to-doList #40

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
onFilm
Bump node-forge from 1.3.1 to 1.3.2 in /website

TheThingsNetwork/lorawan-devices #979

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
TheThingsNetwork
Bump node-forge from 1.3.1 to 1.3.2

GSA/search-gov #1914

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GSA
Bump node-forge from 1.3.1 to 1.3.2 in /src/Cynosura.Template.Web.Ng

CynosuraPlatform/Cynosura.Template #76

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
CynosuraPlatform
Bump node-forge from 1.3.1 to 1.3.2

OxfordComma/GuitarTabImporter #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
OxfordComma
chore(deps): bump node-forge from 1.3.1 to 1.3.2

jeromelachaud/discogs-random-collection-item #246

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jeromelachaud
Bump node-forge from 1.3.1 to 1.3.2

mida-project/prototype-heatmap #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mida-project
internal(pkg): bump node-forge from 1.3.1 to 1.3.2

reactive/data-client #3633

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
reactive
Bump node-forge from 1.3.1 to 1.3.2

RoboSparrow/dreidee #54

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
RoboSparrow
Bump node-forge from 1.3.1 to 1.3.2

pbachman/dasho #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pbachman
Bump node-forge from 1.3.1 to 1.3.2 in /cypress-io-react

jcottam/blog-code-examples #74

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
jcottam
chore(deps): bump node-forge from 1.3.1 to 1.3.2

hyochan/react-native-nitro-sound #745

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
hyochan
build(deps): bump node-forge from 1.3.1 to 1.3.2

johnchoi96/web-app #328

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
johnchoi96
Bump node-forge from 1.3.1 to 1.3.2

navgurukul/chanakya #753

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
navgurukul
Bump node-forge from 1.3.1 to 1.3.2 in /client/ionic4-feathersjsplus-starter

iva2k/ionic4-feathersjsplus-starter #128

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 5 comments
iva2k
chore(deps): bump node-forge from 1.3.1 to 1.3.2

helpmap/helpmap.io #331

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
helpmap
chore(deps): bump node-forge from 1.3.1 to 1.3.2

openedx/frontend-app-learning #1833

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
openedx
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,968 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,539 (27.0%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)