Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,703 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,642 repositories
Unique Repos (30 days):
43 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 15 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 27 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated about 1 month ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
chore(deps): bump the npm_and_yarn group across 3 directories with 22 updates

alialobidm/dotreasury #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
alialobidm
Bump the npm_and_yarn group across 1 directory with 8 updates

hms-dbmi/i2b2v2-webclient #619

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
hms-dbmi
chore(deps): bump the npm_and_yarn group across 1 directory with 38 updates

mrheyday/app #4

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
mrheyday
build(deps): bump the npm_and_yarn group across 7 directories with 32 updates

sumonst21/amplify-cli #13

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
sumonst21
Bump the npm_and_yarn group across 1 directory with 24 updates

Roseymr/account-viewer-v2 #20

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 4 comments
Roseymr
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

AIC-HMV/shields #7

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
AIC-HMV
Bump the npm_and_yarn group across 2 directories with 6 updates

smartrent/badmagic #121

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
smartrent
Bump the npm_and_yarn group across 1 directory with 30 updates

batuhan-basoglu/Kene-s-Cribs-Website #234

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
batuhan-basoglu
chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

NatYou345/xen-orchestra #10

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
NatYou345
Bump the npm_and_yarn group across 2 directories with 7 updates

bolliger-tech/breedersdb.com #269

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
bolliger-tech
Bump the npm_and_yarn group across 2 directories with 9 updates

AKJUS/ag-grid #414

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
AKJUS
Bump the npm_and_yarn group across 1 directory with 23 updates

Namevengare/Firebase_project #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
Namevengare
Bump node-forge from 1.3.1 to 1.3.3 in /game/pacman-canvas-master

OldNoobHK/wwwroot #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
OldNoobHK
build(deps): bump the npm_and_yarn group across 1 directory with 12 updates

spica-engine/spica #1662

1.3.1 → 1.3.2 Patch PR
Open 4 months ago 1 comment
spica-engine
chore(deps): bump the npm_and_yarn group across 2 directories with 21 updates

SunRun/victory-native-xl #28

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 2 comments
SunRun
build(deps-dev): Bump node-forge from 1.3.1 to 1.3.3 in /modules.local/paypal-pos-assets

inpsyde/paypal-point-of-sale #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
inpsyde
Bump the npm_and_yarn group across 2 directories with 16 updates

AKJUS/grandnode2 #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
AKJUS
build(deps): bump the npm_and_yarn group across 4 directories with 21 updates

JohnDaWalka/sui #5

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
JohnDaWalka
Bump the npm_and_yarn group across 4 directories with 24 updates

ANT0071/storybook #5

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 3 directories with 11 updates

ANT0071/parcel #2

1.3.1 → 1.3.2 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 13 directories with 22 updates

ANT0071/activepieces #8

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 69 directories with 12 updates

Malhad/cli-microsoft365 #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
Malhad
Bump node-forge from 1.3.1 to 1.3.3

baca89/ioBroker.gira-homeserver #65

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
baca89
Bump node-forge from 1.3.1 to 1.3.3

baca89/ioBroker.ipverso2n #24

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
baca89
chore(deps): Bump the npm_and_yarn group across 25 directories with 15 updates

aegntic/ae-co-system #8

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
aegntic
Bump node-forge from 1.3.1 to 1.3.3

Andrey1914/portfolio-illustrator #34

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
Andrey1914
Bump the npm_and_yarn group across 8 directories with 29 updates

ccwu0918/pollinations #6

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ccwu0918
chore(deps): bump the npm_and_yarn group across 2 directories with 15 updates

AKJUS/HeaderEditor #20

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
AKJUS
Bump node-forge from 1.3.1 to 1.3.3 in /swap-v2-next-app

somatothing/0x-examples #11

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
somatothing
Bump the npm_and_yarn group across 2 directories with 16 updates

https-gitcom/angular-rock-paper-scissors-sample #13

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
https-gitcom
chore(deps): bump the npm_and_yarn group across 4 directories with 12 updates

syedj17/react-native-reanimated #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
syedj17
chore(deps): Bump the npm_and_yarn group across 9 directories with 26 updates

ssushant0011/backstage-plugins-for-aws #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ssushant0011
chore: bump the npm_and_yarn group across 4 directories with 14 updates

JoftheV/onchainkit #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
JoftheV
chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

NatYou345/xen-orchestra #8

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
NatYou345
chore(deps): bump the npm_and_yarn group across 15 directories with 23 updates

UniversalStandards/activepieces #8

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
UniversalStandards
Bump the npm_and_yarn group across 2 directories with 12 updates

OurDotNetOrganization/RandomAPIApp #18

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
OurDotNetOrganization
deps: bump the npm_and_yarn group across 1 directory with 3 updates

kallhoffa/argbase #17

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
kallhoffa
Bump the npm_and_yarn group across 3 directories with 26 updates

CrazyDubya/storybook #5

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
CrazyDubya
chore(deps): bump the npm_and_yarn group across 2 directories with 31 updates

GlacierEQ/sourcegraph-public-snapshot #6

0.9.0 → 0.9.2 Patch PR
Open 4 months ago 2 comments
GlacierEQ
chore(deps): bump the npm_and_yarn group across 3 directories with 23 updates

alialobidm/rrweb #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
alialobidm
build(deps): bump the npm_and_yarn group across 34 directories with 17 updates

hyperledger-cacti/cacti #4119

1.3.1 → 1.3.2 Patch PR
Closed 4 months ago 1 comment
hyperledger-cacti
build(deps): bump the npm_and_yarn group across 7 directories with 19 updates

q1blue/angular-cli #46

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
q1blue
Bump the npm_and_yarn group across 5 directories with 18 updates

sizzlebop/storybook #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
sizzlebop
Bump the npm_and_yarn group across 2 directories with 12 updates

kingyx3/msp2 #24

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
kingyx3
Bump the npm_and_yarn group across 4 directories with 19 updates

JSTONE1111/sui #13

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
JSTONE1111
chore(deps): bump the npm_and_yarn group across 3 directories with 17 updates

AKJUS/create-hyperweb-app #15

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
AKJUS
Bump the npm_and_yarn group across 3 directories with 22 updates

CxsLucyfer/theme-tools #24

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
CxsLucyfer
Bump the npm_and_yarn group across 5 directories with 18 updates

mybusybee-inc/storybook #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
mybusybee-inc
build(deps): bump the npm_and_yarn group across 7 directories with 15 updates

suissa/openreplay #5

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
suissa
chore(deps): bump the npm_and_yarn group across 5 directories with 8 updates

needaccforwhonix/genai-toolbox #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
needaccforwhonix
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,655 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,535 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)