Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,708 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,645 repositories
Unique Repos (30 days):
28 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 6 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge is vulnerable to ASN.1 OID Integer Truncation
GHSA-65ch-62r8-g69g CVE-2025-66030 MODERATE published 7 months ago • updated about 8 hours ago
### Summary **MITRE-Formatted CVE Description** An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote,...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 6 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 1 day ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump node-forge from 1.3.1 to 1.3.2

common-voice/common-voice #5193

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
common-voice
Bump node-forge from 1.3.1 to 1.3.2

mxtommy/Kip #881

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mxtommy
Bump node-forge from 1.3.1 to 1.3.2 in /src/docs

MarkZither/mywyamblog #89

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
MarkZither
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /e2e/smoke-tests

firebase/firebase-js-sdk #9397

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
firebase
Bump node-forge from 1.3.1 to 1.3.2

dsternlicht/RESTool #310

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
dsternlicht
Bump node-forge from 1.3.1 to 1.3.2 in /l2-frontend

mikhailprivalov/l2 #5271

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
mikhailprivalov
build(deps): bump node-forge from 1.3.1 to 1.3.2 in /react-hooks-app

BboyAkers/ReactProjects #674

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
BboyAkers
Bump node-forge from 1.3.1 to 1.3.2 in /src-admin

MiSchroe/ioBroker.klf200 #365

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
MiSchroe
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /web-worker/workers-and-reactjs/starting-point

marabesi/web-playground #39

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
marabesi
Bump node-forge from 1.3.1 to 1.3.2 in /microcoffeeoncloud-gateway/app

dagbjorn/microcoffeeoncloud #455

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 8 comments
dagbjorn
Bump node-forge from 1.3.1 to 1.3.2

SonyaMoisset/RecipeFinder_REACT-REDUX #159

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
SonyaMoisset
chore(deps): bump node-forge from 1.3.1 to 1.3.2

ZhongAnTech/zarm #1213

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
ZhongAnTech
Bump node-forge from 1.3.1 to 1.3.2 in /frontend

sokamur-phoenix-sample/sample #451

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
sokamur-phoenix-sample
Bump node-forge from 1.3.1 to 1.3.2

Ylianst/MeshCentral #7453

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
Ylianst
Bump node-forge from 1.3.1 to 1.3.2

clearlydefined/crawler #658

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
clearlydefined
Bump node-forge from 1.3.1 to 1.3.2

timber/docs #100

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
timber
ci: bump node-forge from 1.3.1 to 1.3.2

WFCD/warframe-hub #1450

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
WFCD
Bump node-forge from 1.3.1 to 1.3.2

psu-libraries/etda_workflow #945

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
psu-libraries
Bump node-forge from 1.3.1 to 1.3.2 in /samples/WebClient

thomasduft/microwf #78

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
thomasduft
chore(deps): bump node-forge from 1.3.1 to 1.3.2

tsedio/tsed #3216

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
tsedio
Bump node-forge from 1.3.1 to 1.3.2 in /functions

firebase/oss-bot #170

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
firebase
Bump node-forge from 1.3.1 to 1.3.2

looker-open-source/actions #701

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
looker-open-source
Bump node-forge from 1.3.1 to 1.3.2

ryanabest/ryanabest.github.io #22

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
ryanabest
Bump node-forge from 1.3.1 to 1.3.2

imshuffling/davidrich.es #44

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
imshuffling
Bump node-forge from 1.3.1 to 1.3.2

WordPress/health-check #491

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
WordPress
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

doublesymmetry/react-native-track-player #2554

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
doublesymmetry
chore(deps): bump node-forge from 1.3.1 to 1.3.2

lottie-react-native/lottie-react-native #1389

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 3 comments
lottie-react-native
Bump node-forge from 1.3.1 to 1.3.2

cassproject/cass-npm #460

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 4 comments
cassproject
Bump node-forge from 1.3.1 to 1.3.2 in /Samples/Excel.OfflineStorageAddin/manifest-configurations/unified

OfficeDev/Office-Add-in-samples #1061

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
OfficeDev
Bump node-forge from 1.3.1 to 1.3.2

codegard1/blackjack #104

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
codegard1
chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /static/terraboard-vuejs

camptocamp/terraboard #312

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
camptocamp
chore(deps): bump node-forge from 1.3.1 to 1.3.2

seifertd/chord-practice #301

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
seifertd
chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

pressbooks/pressbooks-book #1391

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
pressbooks
Bump node-forge from 1.3.1 to 1.3.2

Automattic/wp-calypso #107338

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
Automattic
Bump node-forge from 1.3.1 to 1.3.2

obipawan/react-native-hyperlink #86

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
obipawan
Bump node-forge from 1.3.1 to 1.3.2

GrapesJS/mjml #409

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
GrapesJS
build(deps): bump node-forge from 1.3.1 to 1.3.2

jumpserver/luna #1477

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
jumpserver
build(deps): bump node-forge from 1.3.1 to 1.3.2

transloadit/uppy #6071

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
transloadit
Bump node-forge from 1.3.1 to 1.3.2 in /api

SCE-Development/Clark #1944

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
SCE-Development
Bump node-forge from 1.3.1 to 1.3.2

bitmovin/bitmovin-player-ui #798

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
bitmovin
Bump node-forge from 1.3.1 to 1.3.2

johnsonlin/johnsonlin #56

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
johnsonlin
Bump node-forge from 1.3.1 to 1.3.2 in /python/ray/dashboard/client

ray-project/ray #59016

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 3 comments
ray-project
chore(deps): bump node-forge from 1.3.1 to 1.3.2

ikemura23/yaimafuni-batch #102

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
ikemura23
Bump node-forge from 1.3.1 to 1.3.2

cpprefjp/crsearch #82

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
cpprefjp
Bump node-forge from 1.3.1 to 1.3.2

kennethclemmensen/kennethclemmensen.dk #25

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 1 comment
kennethclemmensen
Bump node-forge from 1.3.1 to 1.3.2

JustinLivi/justinlivi.com #20

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
JustinLivi
build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /web-user

freehackquest/fhq-server #546

1.3.1 → 1.3.2 Patch PR
Closed 7 months ago 2 comments
freehackquest
chore(deps): Bump node-forge from 1.3.1 to 1.3.2 in /presto-ui/src

prestodb/presto #26708

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
prestodb
Bump node-forge from 1.3.1 to 1.3.2

reportportal/docs #1034

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 1 comment
reportportal
chore(deps): bump node-forge from 1.3.1 to 1.3.2

waynestate/base-site #841

1.3.1 → 1.3.2 Patch PR
Open 7 months ago 2 comments
waynestate
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,968 (52.0%)
Merged 58 (1.0%)
Closed 2,658 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,539 (27.0%)
Patch 2,926 (51.3%)
Removal 43 (0.8%)