Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

node-forge

Ecosystem:
npm
Package URL:
pkg:npm/node-forge
Total PRs:
5,703 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
4,642 repositories
Unique Repos (30 days):
43 repositories
Security Advisories
Forge has signature forgery in RSA-PKCS due to ASN.1 extra field
GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 15 days ago
## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...
node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 27 days ago
### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...
Improper Verification of Cryptographic Signature in node-forge
GHSA-x4jg-mjrx-434g CVE-2022-24772 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a `DigestInfo` ASN.1 structure. Thi...
Improper Verification of Cryptographic Signature in node-forge
GHSA-cfm4-qjh2-4765 CVE-2022-24771 HIGH published over 4 years ago • updated 5 days ago
### Impact RSA PKCS#1 v1.5 signature verification code is lenient in checking the digest algorithm structure. This can allow a crafted structure t...
node-forge has ASN.1 Unbounded Recursion
GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 7 months ago • updated about 1 month ago
### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...
View all 15 advisories
Recent PRs (filtered by: Open , Patch PRs )
RSS Feed Clear filter
build(deps): bump the npm_and_yarn group across 3 directories with 22 updates

ammar-knowledge/storybook #518

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
chore(deps): bump the npm_and_yarn group across 2 directories with 22 updates

ammar-knowledge/storybook #513

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
chore(deps-dev): Bump node-forge from 1.3.1 to 1.3.3 in /client

sloweyyy/cloud-native-ecommerce-platform #284

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 6 comments
sloweyyy
chore(deps): bump the npm_and_yarn group across 3 directories with 19 updates

Dargon789/aa-sdk #118

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
Dargon789
Bump the npm_and_yarn group across 1 directory with 21 updates

chdelucia/angular17Ricky #14

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
chdelucia
chore(deps): bump the npm_and_yarn group across 3 directories with 7 updates

ivan09069/docusaurus #32

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
ivan09069
chore(deps): bump the npm_and_yarn group across 3 directories with 14 updates

Dargon789/safe-apps-sdk #177

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 3 directories with 10 updates

Dargon789/safe-apps-sdk #176

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 4 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 1 directory with 22 updates

lazy-media/Reactive-Resume #177

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
lazy-media
chore(deps): bump the npm_and_yarn group across 3 directories with 11 updates

Dargon789/safe-apps-sdk #169

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
Dargon789
Bump the npm_and_yarn group across 1 directory with 18 updates

HunterSides/defillama-app #1

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
HunterSides
chore(deps): bump the npm_and_yarn group across 1 directory with 8 updates

hyperledger-identus/docs #251

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
hyperledger-identus
chore(deps): bump the npm_and_yarn group across 1 directory with 36 updates

mrheyday/app #14

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
mrheyday
Bump the npm_and_yarn group across 2 directories with 20 updates

Kielek/opentelemetry-demo #69

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
Kielek
Bump the npm_and_yarn group across 3 directories with 24 updates

ammar-knowledge/storybook #488

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates

asleekgeek/docusaurus #178

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 4 comments
asleekgeek
Bump the npm_and_yarn group across 3 directories with 24 updates

ammar-knowledge/storybook #485

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
Bump the npm_and_yarn group across 1 directory with 21 updates

Garrettc123/gumroad #109

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 18 comments
Garrettc123
build(deps): bump the npm_and_yarn group across 7 directories with 18 updates

ASISBusiness/sui #18

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
ASISBusiness
chore(deps): bump the npm_and_yarn group across 3 directories with 18 updates

Dargon789/aa-sdk #111

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
Dargon789
chore(deps): bump the npm_and_yarn group across 4 directories with 19 updates

atze1210/aa-sdk #205

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
atze1210
build(deps): bump the npm_and_yarn group across 7 directories with 17 updates

ASISBusiness/sui #15

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
ASISBusiness
Bump the npm_and_yarn group across 3 directories with 7 updates

wick3dwayz/workers-sdk #2

1.3.1 → 1.3.2 Patch PR
Open 3 months ago 1 comment
wick3dwayz
chore(deps): bump the npm_and_yarn group across 1 directory with 14 updates

Rytass/Utils #143

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
Rytass
Bump the npm_and_yarn group across 1 directory with 14 updates

YoutacRandS-VA/line-bot-sdk-nodejs #5

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
YoutacRandS-VA
chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

Rytass/Utils #142

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
Rytass
chore(deps): bump the npm_and_yarn group across 3 directories with 7 updates

asleekgeek/docusaurus #176

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
asleekgeek
Bump the npm_and_yarn group across 1 directory with 8 updates

kritsanan1/project31 #5

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
kritsanan1
chore(deps): bump the npm_and_yarn group across 4 directories with 19 updates

Dargon789/aa-sdk #109

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
Dargon789
Bump the npm_and_yarn group across 4 directories with 24 updates

ammar-knowledge/storybook #464

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
Bump the npm_and_yarn group across 5 directories with 24 updates

ammar-knowledge/storybook #462

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
ammar-knowledge
chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates

harryzcy/docusaurus #6

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
harryzcy
Bump node-forge from 1.3.0 to 1.3.3

dgrinbergs/sticky-board #14

1.3.0 → 1.3.3 Patch PR
Open 3 months ago 1 comment
dgrinbergs
chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

chdelucia/hunt-the-bishomalo #38

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
chdelucia
chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates

asleekgeek/docusaurus #171

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
asleekgeek
chore(deps): bump the npm_and_yarn group across 1 directory with 37 updates

mrheyday/app #12

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 2 comments
mrheyday
chore(deps): bump the npm_and_yarn group across 1 directory with 36 updates

mrheyday/app #11

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 3 comments
mrheyday
build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

ControlCore-Project/concore-editor #363

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
ControlCore-Project
Bump the npm_and_yarn group across 1 directory with 37 updates

JT5D/create-react-app-auth-amplify #1

1.3.0 → 1.3.3 Patch PR
Open 3 months ago 1 comment
JT5D
Bump node-forge from 1.3.1 to 1.3.3 in /components/dash-table

Merchandising-Solutions/dash-fork #14

1.3.1 → 1.3.3 Patch PR
Open 3 months ago 1 comment
Merchandising-Solutions
Upgrade: Bump the npm_and_yarn group across 1 directory with 28 updates

goodgollyholly/hint #26

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
goodgollyholly
Bump the npm_and_yarn group across 4 directories with 23 updates

ammar-knowledge/storybook #449

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
ammar-knowledge
Bump the npm_and_yarn group across 1 directory with 6 updates

zym9863/Pian-Ai #1

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
zym9863
Bump node-forge from 1.3.1 to 1.3.3 in /docker-workshop-2-angular

ekstend/docker-workshop #10

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
ekstend
chore(deps): bump the npm_and_yarn group across 2 directories with 27 updates

spartan-ng/spartan #1251

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
spartan-ng
build(deps): bump the npm_and_yarn group across 1 directory with 15 updates

zym9863/Do-Not-Say-Goodbye #1

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 1 comment
zym9863
Bump the npm_and_yarn group across 5 directories with 23 updates

ammar-knowledge/storybook #448

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 3 comments
ammar-knowledge
Bump the npm_and_yarn group across 1 directory with 13 updates

zym9863/Xiamen-Tourism-Website #2

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 2 comments
zym9863
Bump the npm_and_yarn group across 4 directories with 8 updates

rshan1515/workers-sdk #6

1.3.1 → 1.3.2 Patch PR
Open 4 months ago 2 comments
rshan1515
chore(deps): bump the npm_and_yarn group across 3 directories with 6 updates

ivan09069/docusaurus #26

1.3.1 → 1.3.3 Patch PR
Open 4 months ago 4 comments
ivan09069
Package Details
Name: node-forge
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/node-forge
JSON API: View JSON
Security Advisories

15

Active advisories
HIGH 9
MODERATE 3
LOW 3
View All npm Advisories
Package Information
Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository: https://github.com/digitalbazaar/forge
Homepage: https://github.com/digitalbazaar/forge
Latest Release: 1.3.1
about 4 years ago
Dependent Repos: 3,039,204
Dependent Packages: 2,329
Downloads: 99,242,131
Ranking: Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs
PR Status
Open 2,966 (52.0%)
Merged 58 (1.0%)
Closed 2,654 (46.5%)
PR Types
Major 1,166 (20.4%)
Minor 1,534 (26.9%)
Patch 2,926 (51.3%)
Removal 42 (0.7%)