`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,710 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
4,647 repositories

Unique Repos (30 days):
24 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated about 12 hours ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge is vulnerable to ASN.1 OID Integer Truncation

GHSA-65ch-62r8-g69g CVE-2025-66030 MODERATE published 7 months ago • updated 1 day ago

### Summary **MITRE-Formatted CVE Description** An Integer Overflow (CWE-190) vulnerability in node-forge versions 1.3.1 and below enables remote,...

Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input

GHSA-5m6q-g25r-mvwx CVE-2026-33891 HIGH published 3 months ago • updated 7 days ago

## Summary A Denial of Service (DoS) vulnerability exists in the node-forge library due to an infinite loop in the BigInteger.modInverse() functio...

Improper Verification of Cryptographic Signature in node-forge

GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 7 days ago

### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 2 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump node-forge from 1.3.1 to 1.3.2 in /site-new

line/armeria #6523

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /apps/api

gothinkster/realworld #1672

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 5 comments

Bump node-forge from 1.3.1 to 1.3.2 in /newclient/resultcatcher

luechtdiode/KuTu #1284

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

tiagoporto/svg-music-logos #155

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /website

visgl/deck.gl #9884

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

neodigm/ever-present-living-style-guide #77

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in the npm_and_yarn group across 1 directory

Aam-Digital/ndb-core #3467

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 9 comments

Bump node-forge from 1.3.1 to 1.3.2

tmoitie/iRacing-week-planner #171

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /services/workbench2

arvados/arvados #320

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

jvalen/pixel-art-react #92

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

eebbesen/harrison_fjord #171

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

brmodeloweb/brmodelo-app #639

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

ChristopherBull/Clear-Links #34

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

czcorpus/kontext #6488

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /examples/with-electron

rsuite/rsuite #4438

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 4 comments

Bump node-forge from 1.3.1 to 1.3.2

JamesVanWaza/PHP-MySQLi-Examples #20

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /sdks/typescript

apache/beam #36920

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in /website

facebook/infer #1972

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /Samples/tutorials/word-tutorial/My Office Add-in

OfficeDev/Office-Add-in-samples #1059

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /docusaurus

Surnet/swagger-jsdoc #435

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /website

terascope/teraslice #4239

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /app

takatoh/Bruschetta #27

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

PrairieLearn/PrairieLearn #13429

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /web/server/vue-cli

Ericsson/codechecker #4711

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /webapp

KSIUJ/gutenberg #139

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

tngan/samlify #587

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

hideo54/homepage #1679

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2 in /frontend

dbflute/dbflute-intro #537

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

arthurvasconcelos/arthurvasconcelos.github.io #14

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2

pronamic/wp-pronamic-pay #425

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /frontend

klen/muffin-admin #169

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

takanakahiko/takanakahiko.me #761

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in /src/CoreShop/Bundle/FrontendBundle/Resources/assets

coreshop/CoreShop #2923

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /website

facebook/flow #9337

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /components/dash-table

plotly/dash #3528

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

Bump node-forge from 1.3.1 to 1.3.2 in /website

chipsalliance/chisel #5097

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 2 comments

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /examples/sample-plugin

hawtio/hawtio #4160

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /console

hawtio/hawtio #4159

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

build(deps): bump node-forge from 1.3.1 to 1.3.2

Courseography/courseography #1640

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps-dev): bump node-forge from 1.3.1 to 1.3.2

nasa/openmct #8205

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

chore(deps): bump node-forge from 1.3.1 to 1.3.2 in /console-minimal

hawtio/hawtio #4158

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 2 comments

chore(deps): Bump node-forge from 1.3.1 to 1.3.2

veg/datamonkey-js #820

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2 in /wp-content/plugins/query-monitor-twig-profile/assets/twig-profile

engagingnewsproject/enp-platform #442

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

build(deps-dev): bump node-forge from 1.3.1 to 1.3.2

Parsely/wp-parsely #3851

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 6 comments

chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.2 in /search/search-dev-tools

Automattic/vip-go-mu-plugins #6634

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 3 comments

Bump node-forge from 1.3.1 to 1.3.2 in /website

apache/druid #18783

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

UniversalViewer/universalviewer #1620

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

build(deps): bump node-forge from 1.3.1 to 1.3.2 in /tests/e2e-playwright

rtCamp/nginx-helper #472

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

glen-cheney/Shuffle #649

1.3.1 → 1.3.2 Patch PR

Closed 7 months ago 1 comment

Bump node-forge from 1.3.1 to 1.3.2

albinotonnina/albinotonnina.com #67

1.3.1 → 1.3.2 Patch PR

Open 7 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,968 (52.0%)

Merged 58 (1.0%)

Closed 2,659 (46.6%)

PR Types

Major 1,167 (20.4%)

Minor 1,539 (27.0%)

Patch 2,926 (51.3%)

Removal 43 (0.8%)