`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,709 Dependabot PRs

Latest PR:
5 days ago

Unique Repositories:
4,646 repositories

Unique Repos (30 days):
24 repositories

Security Advisories

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

GHSA-2328-f5f3-gj25 CVE-2026-33896 HIGH published 3 months ago • updated 7 days ago

## Summary `pki.verifyCertificateChain()` does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the ...

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

GHSA-5m6q-g25r-mvwx CVE-2026-33891 HIGH published 3 months ago • updated 7 days ago

## Summary A Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInteger.modInverse() functio...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2

luft-jetzt/luft-app #436

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

rapid7/awsaml #284

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

ActivityWatch/aw-watcher-web #206

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2

ui-router/angular #1008

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /packages/react/examples/react-router

carbon-design-system/carbon #21086

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

AjuntamentdeBarcelona/decidim-barcelona #663

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

GamesDoneQuick/donation-tracker #919

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /modules/cashtab-connect/demo

Bitcoin-ABC/bitcoin-abc #597

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /app

mageddo/dns-proxy-server #642

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

thymikee/jest-preset-angular #3460

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

cncjs/cncjs #940

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /superset-frontend

apache/superset #36299

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /knife4j-doc

xiaoymin/knife4j #971

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

ORNL-AMO/AMO-Tools-Desktop #7995

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

neilime/twbs-helper-module #748

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /platform/docs

OHIF/Viewers #5592

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

awto/effectfuljs #42

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

neinteractiveliterature/larp_library #2973

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

nextcloud/richdocuments #5203

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

bfirsh/jsnes-web #415

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

iobroker-community-adapters/ioBroker.tvspielfilm #183

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

microsoft/powerbi-visuals-streamgraph #249

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /ui-frontend/packages/catalog-ui-search

codice/ddf-ui #1084

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docs

react-native-documents/document-picker #887

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

neodigm/chi_capstone_prototype1 #89

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

Huachao/vscode-restclient #1407

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Kitware/vtk-js #3370

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Build(deps): Bump node-forge from 1.3.1 to 1.3.2

microsoft/MHA #1635

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Build(deps-dev): Bump node-forge from 1.3.1 to 1.3.2

nextcloud/backup #785

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

fix(deps): bump node-forge from 1.3.1 to 1.3.2

kgrubb/keligrubb.com #626

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

leek-wars/leek-wars #760

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

alexinslc/hickory #87

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

lesspass/lesspass #850

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

comfuture/changkyun.kim #478

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

openhab/openhab-cloud #508

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /.nx/installation

yak-was-here/yak-was-here #36

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

NCIEVS/nci-report-writer2 #55

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /frontend

edb-gjengen/galtinn #87

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /ui

1tchy/mooncal #16

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /STUDIO/studio-ui in the npm_and_yarn group across 1 directory

openl-tablets/openl-tablets #1275

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /oauth-rest/oauth-ui-authorization-code-angular/src/main/resources

Baeldung/spring-security-oauth #604

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

ioBroker/ioBroker.pushsafer #77

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /extension/sonar-process-test-coverage-plugin

camunda-community-hub/camunda-process-test-coverage #778

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): Bump node-forge from 1.3.1 to 1.3.2 in /firebase/functions

itachi1706/CheesecakeUtilities #776

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /gedbrowserng-frontend

dickschoeller/gedbrowser #1090

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2

ringcentral/ringcentral-js-widgets #1783

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /build

inker/draw #223

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /authcode

microsoft/pxt #10978

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /app

reportportal/service-ui #4762

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2

archesproject/arches #12518

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,968 (52.0%)

Merged 58 (1.0%)

Closed 2,659 (46.6%)

PR Types

Major 1,167 (20.4%)

Minor 1,539 (27.0%)

Patch 2,926 (51.3%)

Removal 43 (0.8%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge is vulnerable to ASN.1 OID Integer Truncation

Improper Verification of Cryptographic Signature in node-forge

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

Recent PRs (filtered by: Patch PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`