`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
3,779 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
3,417 repositories

Unique Repos (30 days):
230 repositories

Security Advisories

node-forge has ASN.1 Unbounded Recursion

GHSA-554w-wpv2-vw27 CVE-2025-66031 HIGH published 3 months ago • updated 17 days ago

### Summary An Uncontrolled Recursion (CWE-674) vulnerability in node-forge versions 1.3.1 and below enables remote, unauthenticated attackers to ...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 3 months ago • updated 12 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 11 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

chore(deps): bump the npm_and_yarn group across 6 directories with 18 updates

HeadyMe/Heady-pre-production-9f2f0642 #90

0.10.0 → 1.3.3 Major PR

Open about 4 hours ago 2 comments

Bump the npm_and_yarn group across 8 directories with 17 updates

CaffeeLake/AugmentOS #21

0.10.0 → 1.3.3 Major PR

Open 5 days ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 9 updates

HeadyMe/Heady-pre-production-9f2f0642 #66

0.10.0 → 1.3.3 Major PR

Closed 7 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 15 updates

CaffeeLake/AugmentOS #19

0.10.0 → 1.3.3 Major PR

Closed 7 days ago 2 comments

Bump the npm_and_yarn group across 7 directories with 14 updates

CaffeeLake/AugmentOS #18

0.10.0 → 1.3.3 Major PR

Open 7 days ago 1 comment

Bump the npm_and_yarn group across 7 directories with 14 updates

CaffeeLake/AugmentOS #16

0.10.0 → 1.3.3 Major PR

Open 8 days ago 1 comment

Bump the npm_and_yarn group across 7 directories with 15 updates

CaffeeLake/AugmentOS #13

0.10.0 → 1.3.3 Major PR

Closed 11 days ago 2 comments

Bump node-forge and react-scripts

Fritz-Fandango/open_weather_redux #10

0.10.0 → 1.3.3 Major PR

Closed 13 days ago 1 comment

Bump the npm_and_yarn group across 8 directories with 14 updates

CaffeeLake/AugmentOS #7

0.10.0 → 1.3.3 Major PR

Closed 17 days ago 2 comments

Bump the npm_and_yarn group across 8 directories with 14 updates

CaffeeLake/AugmentOS #5

0.10.0 → 1.3.3 Major PR

Open 18 days ago 1 comment

Bump the npm_and_yarn group across 9 directories with 16 updates

CaffeeLake/AugmentOS #4

0.10.0 → 1.3.3 Major PR

Open 18 days ago 2 comments

Bump node-forge and react-scripts in /Authentico.ReactWebApp

MarkGravestock/Authentico.SecuredAzureApp #31

0.9.0 → 1.3.3 Major PR

Closed about 1 month ago 1 comment

Bump node-forge and @vue/cli-service in /OPS.Site

ops-org/operacao-politica-supervisionada #78

0.10.0 → 1.3.3 Major PR

Closed about 1 month ago 2 comments

Bump node-forge and @angular-devkit/build-angular

jasedwards/AngularLazyModule #48

0.7.5 → 1.3.3 Major PR

Closed about 1 month ago 1 comment

Bump node-forge and @vue/cli-service in /web

webmasterproT/automl #2

0.9.0 → 1.3.3 Major PR

Open about 1 month ago 1 comment

Bump node-forge and webpack-dev-server

Mostafasaffari/React-Todo-Sample-CustomWebpack #12

0.10.0 → 1.3.3 Major PR

Closed 2 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

Centeno448/angular-video-web #38

0.9.0 → 1.3.3 Major PR

Closed 2 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

Ahmed-Shehzad/angular-content-projection #46

0.7.5 → 1.3.3 Major PR

Closed 2 months ago 1 comment

chore(deps): bump node-forge and @vue/cli-service in /frontend

betagouv/ma-cantine #6102

0.10.0 → 1.3.3 Major PR

Closed 2 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

aidenappl/hillviewAssets #9

0.10.0 → 1.3.3 Major PR

Closed 2 months ago 2 comments

Bump node-forge and google-p12-pem

guillermolam/pulumi-aws-cdk-template #7

0.10.0 → 1.3.3 Major PR

Open 3 months ago 1 comment

Bump node-forge and react-scripts in /code

anna-ip/React-restaurant #9

0.10.0 → 1.3.3 Major PR

Open 3 months ago 1 comment

Bump node-forge and react-scripts in /code

anna-ip/project-happy-thoughts #7

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

eccsm/Angular-Client #6

0.9.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

build(deps): bump node-forge and react-scripts in /frontend

City-of-Vantaa-SmartLab/ohjatun-liikunnan-kertaliput #161

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

mkmukesh892/angular-testing-demo #42

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 3 comments

Bump node-forge and webpack-dev-server

JSTONE1111/pi-explorer #5

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 4 updates

wecaredigital/r.wecare.digital #3

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

chore(deps): bump node-forge and webpack-dev-server

ecomplus/shopping-cart #338

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and webpack-dev-server in /www

lesguillemets/picawngh #34

0.9.0 → 1.3.3 Major PR

Open 3 months ago 1 comment

Bump node-forge and react-scripts

Slava-Sanin/React-Crash-Course-Vladilen #41

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts

bashiraziz/bootcamp2020A-class2 #9

0.9.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

jmagit/CursoA7 #21

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and webpack-dev-server in /TestCommandLine/ts

hashgraph/hedera-grpcWeb-proxy #44

0.10.0 → 1.3.3 Major PR

Open 3 months ago 1 comment

Bump node-forge and react-scripts

MartinDCalderonP/CABA-Diario #4

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts

bdfinst/total-perspective-vortex #128

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge from 0.10.0 to 1.3.3 in the npm_and_yarn group across 1 directory

kapbka/react_expense_tracker #5

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge from 0.10.0 to 1.3.3 in the npm_and_yarn group across 1 directory

kapbka/react_users #5

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and @angular-devkit/build-angular

MariaVlahova/AngularBegginersGuide #24

0.9.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and webpack-dev-server

AhsanKhan7/React-boiler-plate #38

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts

MartinJerard/mjsnaps #7

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 1 comment

build(deps): bump node-forge and react-scripts

AndersonSilva94/desafio-mesha-tecnologia #1

0.10.0 → 1.3.3 Major PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 16 updates

edwinparejas/ACME-Sample #6

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 13 updates

edwinparejas/ACME-Sample #3

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 10 updates

edwinparejas/ACME-Sample #2

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 20 updates

Olooce/redux-saga-auth-app #6

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 1 directory with 15 updates

Olooce/redux-saga-auth-app #5

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 2 comments

Bump node-forge and @angular-devkit/build-angular in /ApiNetCore3MongoDB/WebApplication1/ClientApp

martinnv6/cSharpPractice #20

0.7.5 → 1.3.3 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts in /task/react/react-16

Fhwang0926/awen-build-agent #3

0.10.0 → 1.3.2 Major PR

Closed 3 months ago 1 comment

Bump node-forge and webpack-dev-server

VitalyBrusentsev/FableBounce #34

0.9.0 → 1.3.2 Major PR

Closed 3 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

11

Active advisories

HIGH 5

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` almost 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,217 (58.7%)

Merged 58 (1.5%)

Closed 1,478 (39.1%)

PR Types

Removal 13 (0.3%)

Minor 73 (1.9%)

Major 1,013 (26.8%)

Patch 2,647 (70.1%)

node-forge

Security Advisories

node-forge has ASN.1 Unbounded Recursion

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Prototype Pollution in node-forge debug API.

URL parsing in node-forge could lead to undesired behavior.

Open Redirect in node-forge

Recent PRs (filtered by: Major PRs )

Package Details

Security Advisories

11

Package Information

PR Status

PR Types

`node-forge`