Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,703 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
4,642 repositories
Unique Repos (30 days):
43 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 15 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 27 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated about 1 month ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump the npm_and_yarn group across 3 directories with 13 updates

YoutacRandS-VA/line-bot-sdk-nodejs #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 4 comments
YoutacRandS-VA
Bump the npm_and_yarn group across 6 directories with 12 updates

ANT0071/azure-sdk-for-js #3

1.3.1 → 1.3.2 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 7 directories with 32 updates

balajirajput96/generative-ai-docs #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
balajirajput96
chore(deps): bump the npm_and_yarn group across 15 directories with 24 updates

UniversalStandards/activepieces #6

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
UniversalStandards
chore(deps): bump the npm_and_yarn group across 2 directories with 9 updates

ANT0071/rnx-kit #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 2 directories with 8 updates

Sai-Dangade777/Personal-Finance-Manager #15

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
Sai-Dangade777
chore(deps): bump node-forge from 1.3.1 to 1.3.3 in /examples/classic-typescript

ivan09069/docusaurus #19

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
ivan09069
chore(deps): bump the npm_and_yarn group across 4 directories with 11 updates

ANT0071/docusaurus #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ANT0071
Bump the npm_and_yarn group across 2 directories with 9 updates

Atul-Vishwakarma9/ChatSphere #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 2 comments
Atul-Vishwakarma9
build(deps): bump the npm_and_yarn group across 4 directories with 19 updates

ASISBusiness/sui #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
ASISBusiness
chore(deps): bump the npm_and_yarn group across 2 directories with 7 updates

fabriziosalmi/wildbox #59

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
fabriziosalmi
Bump the npm_and_yarn group across 3 directories with 12 updates

hatsuyuki280/ShiguReader #38

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
hatsuyuki280
Bump the npm_and_yarn group across 3 directories with 10 updates

MATHEESHA2/ToDoBackend #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
MATHEESHA2
chore(deps): bump the npm_and_yarn group across 4 directories with 18 updates

LogicaldataCo/docusaurus #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
LogicaldataCo
Build(deps): Bump the npm_and_yarn group across 2 directories with 9 updates

KnownTeach616/mern-todo-app #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
KnownTeach616
build(deps): bump the npm_and_yarn group across 3 directories with 21 updates

jgeofil/langflow #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
jgeofil
Bump the npm_and_yarn group across 6 directories with 18 updates

alokkulkarni/backstage #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
alokkulkarni
Bump the npm_and_yarn group across 4 directories with 12 updates

stephanelkhoury/harmonix #7

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
stephanelkhoury
Bump the npm_and_yarn group across 2 directories with 17 updates

abrahem79/studio #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
abrahem79
chore(deps): bump node-forge from 1.3.1 to 1.3.3 in /frontend

ssushant0011/openreplay #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ssushant0011
Bump the npm_and_yarn group across 13 directories with 29 updates

ssushant0011/omnivore #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ssushant0011
chore(deps): bump the npm_and_yarn group across 4 directories with 17 updates

Welbert5753/docusaurus #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
Welbert5753
Bump the npm_and_yarn group across 2 directories with 10 updates

lavkeshdwivedi/planning-poker #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
lavkeshdwivedi
build(deps): bump the npm_and_yarn group across 4 directories with 8 updates

YeonwooSung/MLOps #175

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
YeonwooSung
Bump the npm_and_yarn group across 2 directories with 11 updates

kishorproject/mern-blog #3

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
kishorproject
build(deps): bump the npm_and_yarn group across 1 directory with 7 updates

enatega/food-delivery-multivendor #2140

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 2 comments
enatega
build(deps): bump the npm_and_yarn group across 2 directories with 6 updates

Horlabrainmoore/firebase-admin-node #10

1.3.1 → 1.3.2 Patch PR
Closed 4 months ago 2 comments
Horlabrainmoore
chore(deps): bump the npm_and_yarn group across 5 directories with 16 updates

atze1210/aa-sdk #184

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 3 comments
atze1210
Bump the npm_and_yarn group across 3 directories with 37 updates

strixxx9129/AmplifAI-PlaylistGenerator #6

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
strixxx9129
Bump the npm_and_yarn group across 14 directories with 17 updates

jgeofil/hash #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 2 comments
jgeofil
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

Rytass/Utils #133

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
Rytass
build(deps): bump node-forge from 1.3.1 to 1.3.3

MTES-MCT/sparte #1463

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
MTES-MCT
Bump the npm_and_yarn group across 2 directories with 4 updates

smartrent/badmagic #119

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
smartrent
chore(deps-dev): bump the npm_and_yarn group across 4 directories with 2 updates

rudderlabs/rudder-sdk-js #2782

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
rudderlabs
chore(deps): bump the npm_and_yarn group across 5 directories with 7 updates

alchemyplatform/aa-sdk #2354

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 3 comments
alchemyplatform
chore(deps): bump the npm_and_yarn group across 2 directories with 17 updates

vechain/x-app-template #53

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
vechain
Bump the npm_and_yarn group across 1 directory with 6 updates

ttbud/ttbud #1042

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ttbud
chore(deps): bump the npm_and_yarn group across 1 directory with 12 updates

AIC-HMV/shields #6

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
AIC-HMV
build(deps): bump the npm_and_yarn group across 3 directories with 15 updates

Dargon789/aa-sdk #96

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 3 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 16 directories with 21 updates

robert2687/genkit #82

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
robert2687
chore(deps): bump the npm_and_yarn group across 5 directories with 28 updates

ssushant0011/langchainjs #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
ssushant0011
Bump node-forge from 1.3.1 to 1.3.3 in /public/functions

laurendudu/ay-no #25

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
laurendudu
build(deps): bump the npm_and_yarn group across 4 directories with 6 updates

trizist/nixpkgs #3

1.3.1 → 1.3.2 Patch PR
Closed 4 months ago 1 comment
trizist
build(deps): bump the npm_and_yarn group across 1 directory with 2 updates

JoelA510/AIAdvocate #36

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 2 comments
JoelA510
build(deps): bump the npm_and_yarn group across 10 directories with 17 updates

aww-edu/continue #4

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
aww-edu
Bump the npm_and_yarn group across 6 directories with 17 updates

cptthura-alt/graphiql #2

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
cptthura-alt
chore(deps): bump the npm_and_yarn group across 6 directories with 23 updates

enorthcutt/langchainjs #3

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
enorthcutt
chore(deps): bump the npm_and_yarn group across 2 directories with 18 updates

vechain/x-app-template #52

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
vechain
chore(deps): bump the npm_and_yarn group across 3 directories with 33 updates

YoutacRandS-VA/activepieces #18

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
YoutacRandS-VA
chore(deps): bump the npm_and_yarn group across 2 directories with 19 updates

vechain/x-app-template #51

1.3.1 → 1.3.3 Patch PR
Closed 4 months ago 1 comment
vechain
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,655 (46.6%)
PR Types
Major 1,166 (20.4%)
Minor 1,535 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)