Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 6 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge is vulnerable to ASN.1 OID Integer Truncation
GHSA-65ch-62r8-g69g CVE-2025-66030 MODERATE published 7 months ago • updated about 5 hours ago
### Summary **MITRE-Formatted CVE Description** An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote,...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated about 22 hours ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2 in /public

makerspace/makeradmin #683

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
makerspace
Bump node-forge from 1.3.1 to 1.3.2

plone/plone.staticresources #401

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
plone
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

Mindfield-dk/www #1225

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Mindfield-dk
Bump node-forge from 1.3.1 to 1.3.2 in /web-vis/www

arazabishov/pvec-rs #115

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
arazabishov
Bump node-forge from 1.3.1 to 1.3.2 in /spec/dummy

shakacode/react_on_rails_pro #564

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
shakacode
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

italia/design-angular-kit #518

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
italia
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

travetto/travetto #288

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
travetto
Bump node-forge from 1.3.1 to 1.3.2 in /website

meta-pytorch/botorch #3091

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
meta-pytorch
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /test

gisaia/ARLAS-web-contributors #642

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
gisaia
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

SharebookBR/sharebook-frontend #516

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
SharebookBR
Bump node-forge from 1.3.1 to 1.3.2

Zimbra/zimlet-cli #307

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Zimbra
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

facebook/sapling #1156

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
facebook
Bump node-forge from 1.3.1 to 1.3.2 in /webapp

linnando/MIXEmulator #40

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
linnando
chore(deps): bump node-forge from 1.3.1 to 1.3.2

levino/mock-jwks #269

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
levino
Bump node-forge from 1.3.1 to 1.3.2

psweeney101/searchme #59

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
psweeney101
Bump node-forge from 1.3.1 to 1.3.2

arringtonm/fivestar #53

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
arringtonm
Bump node-forge from 1.3.1 to 1.3.2 in /documentation/website

facebook/pyre-check #1015

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
facebook
Bump node-forge from 1.3.1 to 1.3.2 in /website

uber/h3 #1099

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
uber
Bump node-forge from 1.3.1 to 1.3.2

the-control-group/react-split-test #48

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
the-control-group
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /tests-e2e

help-me-mom/ng-mocks #12550

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
help-me-mom
Build(deps): Bump node-forge from 1.3.1 to 1.3.2

BlueWallet/BlueWallet #8194

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
BlueWallet
chore(deps): bump node-forge from 1.3.1 to 1.3.2

SFDigitalServices/sf-dahlia-lap #766

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
SFDigitalServices
chore(deps): bump node-forge from 1.3.1 to 1.3.2

stefanoslig/angular-ngrx-nx-realworld-example-app #378

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
stefanoslig
Bump node-forge from 1.3.1 to 1.3.2 in /platypush/backend/http/webapp

blacklight/platypush #490

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
blacklight
Bump node-forge from 1.3.1 to 1.3.2

epam/miew #628

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
epam
Bump node-forge from 1.3.1 to 1.3.2 in /admin

makerspace/makeradmin #682

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
makerspace
chore(deps): bump node-forge from 1.3.1 to 1.3.2

garden-io/garden #7847

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
garden-io
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2 in /tests/examples/source/angular

redhat-developer/odo #7321

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 6 comments
redhat-developer
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

cerebral/overmind #639

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
cerebral
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /packages/auth-compat/demo/functions

firebase/firebase-js-sdk #9398

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
firebase
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Super-Cascadia/trimet-arrivals #936

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
Super-Cascadia
Bump node-forge from 1.3.1 to 1.3.2

rdrrichards/QIQO.Ngrx #64

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
rdrrichards
build(deps): bump node-forge from 1.3.1 to 1.3.2

HealthCatalyst/Fabric.Cashmere #2439

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
HealthCatalyst
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

m-h-c-t/mh-helper-extension #673

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
m-h-c-t
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /e2e/a16

help-me-mom/ng-mocks #12548

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
help-me-mom
Website: Bump node-forge from 1.3.1 to 1.3.2 in /docs/website

redhat-developer/odo #7320

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 6 comments
redhat-developer
Bump node-forge from 1.3.1 to 1.3.2

Opetushallitus/ehoks-ui #511

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
Opetushallitus
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

pressbooks/pressbooks-cas-sso #186

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pressbooks
Bump node-forge from 1.3.1 to 1.3.2

uc-cdis/gen3-qa #1091

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
uc-cdis
Bump node-forge from 1.3.1 to 1.3.2 in /Development

sony/nmos-js #114

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
sony
Bump node-forge from 1.3.1 to 1.3.2

timoteialbu/eliashomesltd #121

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
timoteialbu
Bump node-forge from 1.3.1 to 1.3.2 in /react/legacy

sprx97/OldTimeHockey #227

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sprx97
Bump node-forge from 1.3.1 to 1.3.2

likecoin/like-co #1806

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
likecoin
Bump node-forge from 1.3.1 to 1.3.2

MikePopoloski/slang-website #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MikePopoloski
Bump node-forge from 1.3.1 to 1.3.2

systelab/systelab-login #211

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
systelab
Bump node-forge from 1.3.1 to 1.3.2 in /ui

aws/aws-ops-wheel #148

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
aws
Bump node-forge from 1.3.1 to 1.3.2

webextension-toolbox/webextension-toolbox #1162

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
webextension-toolbox
Bump node-forge from 1.3.1 to 1.3.2

duckduckgo/duckduckgo-privacy-extension #3313

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
duckduckgo
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /build/frontend-legacy

siosios/server #445

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
siosios
chore: Bump node-forge from 1.3.1 to 1.3.2 in /apps/test-suite/functions

expo/expo #41269

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
expo
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,968 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,539 (27.0%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)