Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 6 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge is vulnerable to ASN.1 OID Integer Truncation
GHSA-65ch-62r8-g69g CVE-2025-66030 MODERATE published 7 months ago • updated about 1 hour ago
### Summary **MITRE-Formatted CVE Description** An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote,...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 18 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

assuncaocharles/ngx-indexed-db #457

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
assuncaocharles
Bump the npm_and_yarn group across 1 directory with 3 updates

visdesignlab/upset2 #584

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
visdesignlab
Bump node-forge from 1.3.1 to 1.3.2

performwp/perform #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
performwp
chore(deps): bump node-forge from 1.3.1 to 1.3.2

react-native-async-storage/async-storage #1226

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
react-native-async-storage
Bump node-forge from 1.3.1 to 1.3.2

silverstripe/cwp-starter-theme #277

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
silverstripe
build(deps): bump node-forge from 1.3.1 to 1.3.2

qiwi/pijma #632

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
qiwi
chore: bump node-forge from 1.3.1 to 1.3.2

rejas/veeck.de #307

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
rejas
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /desktop/angular

safing/portmaster #2084

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
safing
Bump node-forge from 1.3.1 to 1.3.2

ntanwir10/React-movie-search #59

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ntanwir10
Bump node-forge from 1.3.1 to 1.3.2 in /utf8/dev2fun.multidomain/frontend

darkfriend/dev2fun.multidomain #68

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
darkfriend
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /example/signapp

YanYuanFE/react-native-signature-canvas #401

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
YanYuanFE
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /e2e/a14

help-me-mom/ng-mocks #12553

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
help-me-mom
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

vcjpierre/ng-weather #59

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
vcjpierre
Bump node-forge from 1.3.1 to 1.3.2

zzorba/ArkhamCards #700

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
zzorba
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

tuanicom/incap #592

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
tuanicom
Bump node-forge from 1.3.1 to 1.3.2

trackhub/website #363

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
trackhub
Bump node-forge from 1.3.1 to 1.3.2

Automattic/color-studio #850

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Automattic
Bump node-forge from 1.3.1 to 1.3.2

JamesVanWaza/algolia-instantsearch-demo #590

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
JamesVanWaza
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /e2e/a15

help-me-mom/ng-mocks #12552

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
help-me-mom
Bump node-forge from 1.3.1 to 1.3.2

asterics/AsTeRICS-Grid #689

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
asterics
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

bithost-gmbh/ngx-mat-select-search #559

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
bithost-gmbh
⬆️ Bump node-forge from 1.3.1 to 1.3.2

yoesuv/Info-Malang-Batu-RN #49

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
yoesuv
chore(deps): bump node-forge from 1.3.1 to 1.3.2

noahm/DDRCardDraw #504

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
noahm
Bump node-forge from 1.3.1 to 1.3.2

lVlyke/lithium-angular-example-app #63

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
lVlyke
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Instawork/hyperview #1271

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Instawork
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

jy95/YTscheduledVideos2Ical #71

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jy95
chore: bump node-forge from 1.3.1 to 1.3.2

cedricdelpoux/gatsby-source-google-docs #268

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
cedricdelpoux
Bump node-forge from 1.3.1 to 1.3.2 in /demo-app

spoonconsulting/cordova-plugin-simple-camera-preview #131

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
spoonconsulting
Bump node-forge from 1.3.1 to 1.3.2

jojozhuang/game-store-react #56

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jojozhuang
Bump node-forge from 1.3.1 to 1.3.2 in /sample/playground-functions/functions

TobiasBuchholz/Plugin.Firebase #550

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
TobiasBuchholz
chore(deps): bump node-forge from 1.3.1 to 1.3.2

dsi-icl/dmp #1134

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
dsi-icl
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /e2e/min

help-me-mom/ng-mocks #12551

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
help-me-mom
Bump node-forge from 1.3.1 to 1.3.2

pozetroninc/qrbarco_de-frontend #123

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
pozetroninc
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /smoke-tests/src/androidTest/backend/functions/functions

firebase/firebase-android-sdk #7572

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
firebase
Bump node-forge from 1.3.1 to 1.3.2

MusicalPatterns/cli #56

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MusicalPatterns
Bump node-forge from 1.3.1 to 1.3.2

danhemerlein/danhemerlein.com #129

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
danhemerlein
Bump node-forge from 1.3.1 to 1.3.2

Bit-Developer/text-compare-angular #73

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Bit-Developer
Bump node-forge from 1.3.1 to 1.3.2

mcclowes/mcclowes.com #535

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
mcclowes
chore(deps): bump node-forge from 1.3.1 to 1.3.2

RedHatInsights/insights-inventory-frontend #2801

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
RedHatInsights
chore(deps): bump node-forge from 1.3.1 to 1.3.2

eclipse-thingweb/website #147

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
eclipse-thingweb
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend

pshebel/xword #43

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pshebel
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

josh-berry/tab-stash #650

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
josh-berry
chore(deps): bump node-forge from 1.3.1 to 1.3.2

Availity/availity-react #1648

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Availity
chore: Bump node-forge from 1.3.1 to 1.3.2 in /docs

arcus-azure/arcus.webapi #497

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
arcus-azure
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

mbnuqw/sidebery #2313

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mbnuqw
Bump node-forge from 1.3.1 to 1.3.2

WordPress/gutenberg #73601

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
WordPress
build(deps): bump node-forge from 1.3.1 to 1.3.2

OneCommunityGlobal/HGNRest #1923

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
OneCommunityGlobal
chore(deps): bump node-forge from 1.3.1 to 1.3.2

flavioislima/remote-jobs-app #47

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
flavioislima
Bump node-forge from 1.3.1 to 1.3.2 in /web

madneal/gshark #261

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
madneal
Bump node-forge from 1.3.1 to 1.3.2

munir131/attachment-downloader #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
munir131
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,968 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,539 (27.0%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)