`node-forge`

Ecosystem:
npm

Package URL:
pkg:npm/node-forge

Total PRs:
5,703 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
4,642 repositories

Unique Repos (30 days):
43 repositories

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

GHSA-ppp5-5v6c-4jwp CVE-2026-33894 HIGH published 3 months ago • updated 15 days ago

## Summary RSASSA PKCS#1 v1.5 signature verification accepts forged signatures for low public exponent keys (e=3). Attackers can forge signatures b...

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

GHSA-5gfm-wpxj-wjgq CVE-2025-12816 HIGH published 7 months ago • updated 27 days ago

### Summary CVE-2025-12816 has been reserved by CERT/CC **Description** An Interpretation Conflict (CWE-436) vulnerability in node-forge versions...

View all 15 advisories

Recent PRs (filtered by: Major PRs )

RSS Feed Clear filter

Bump the npm_and_yarn group across 6 directories with 14 updates

URLocalVegan/equal-access #31

0.10.0 → 1.4.0 Major PR

Open about 1 month ago 3 comments

build(deps): bump node-forge and react-scripts

cecil-ia-labs/semantic-ui-react-icon-picker #11

0.9.0 → 1.4.0 Major PR

Open about 2 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates

hejiaji/toolbox #21

0.10.0 → 1.4.0 Major PR

Closed about 2 months ago 1 comment

Bump node-forge and @vue/cli-service

allanalves92/stock-trader #33

0.9.0 → 1.4.0 Major PR

Closed 2 months ago 1 comment

Bump node-forge from 0.10.0 to 1.4.0 in /example in the npm_and_yarn group across 1 directory

devzonetech/react-show-more-text #63

0.10.0 → 1.4.0 Major PR

Closed 2 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 3 directories with 11 updates

MetaMask/keystone-sdk-base #11

0.10.0 → 1.4.0 Major PR

Open 2 months ago 3 comments

build(deps): bump node-forge and @docusaurus/core in /docs

Pranomvignesh/constrained-editor-plugin #86

0.10.0 → 1.4.0 Major PR

Open 2 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 22 updates

seandunlap/node-red-nodes #9

0.7.6 → 1.4.0 Major PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 22 directories with 8 updates

J44951/marz #84

0.7.5 → 1.4.0 Major PR

Closed 2 months ago 1 comment

Bump the npm_and_yarn group across 8 directories with 14 updates

CaffeeLake/AugmentOS #38

0.10.0 → 1.4.0 Major PR

Closed 2 months ago 2 comments

Bump node-forge and @vue/cli-service

jpstroop/storage_finder #51

0.9.0 → 1.4.0 Major PR

Closed 2 months ago 1 comment

Bump node-forge and react-scripts in /frontend

rdburdett/We-Love-Movies #1

0.10.0 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 24 directories with 7 updates

GloWE3/WebKit-4-Rainbowbeast #110

0.6.33 → 1.4.0 Major PR

Open 3 months ago 3 comments

Bump the npm_and_yarn group across 25 directories with 11 updates

alexis-opolka/joplin #53

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 7 directories with 5 updates

UbuntuEvangelist/DIGIT-OSS #21

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 24 directories with 6 updates

GloWE3/WebKit-4-Rainbowbeast #109

0.6.33 → 1.4.0 Major PR

Closed 3 months ago 4 comments

Bump the npm_and_yarn group across 7 directories with 4 updates

UbuntuEvangelist/DIGIT-OSS #20

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump node-forge and webpack-dev-server

APTG/dedx_web #313

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 1 directory with 2 updates

AKJUS/Kryha-Carbon #10

0.10.0 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 3 updates

hazad3071/sun-network #11

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 21 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #105

0.6.33 → 1.4.0 Major PR

Closed 3 months ago 2 comments

Bump the npm_and_yarn group across 23 directories with 3 updates

GloWE3/WebKit-4-Rainbowbeast #104

0.6.33 → 1.4.0 Major PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 17 directories with 3 updates

GloWE3/WebKit-4-Rainbowbeast #103

0.6.33 → 1.4.0 Major PR

Closed 3 months ago 3 comments

Bump the npm_and_yarn group across 1 directory with 2 updates

gonzafg2/creasys-workspaces-booking #3

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 4 updates

charles-adedotun/tutorials #40

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 4 updates

jaypatrick/Web-Dev-For-Beginners #26

0.10.0 → 1.4.0 Major PR

Open 3 months ago 2 comments

Bump node-forge and react-scripts in /Frontend

haliercesr/pidogs2023 #1

0.10.0 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 16 directories with 2 updates

steveseguin/image-analyze-workers #70

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 2 updates

steveseguin/image-analyze-workers #68

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 2 updates

UbuntuEvangelist/DIGIT-OSS #13

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 18 directories with 2 updates

Waka758/Fullstack-projects-frontend-with-react-and-backend-with-various-stacks #76

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 2 directories with 3 updates

aaaronmiller/Board-Games-With-Friends #33

0.7.5 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 32 directories with 3 updates

kristentr/WebKit #142

0.10.0 → 1.4.0 Major PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 28 directories with 4 updates

kristentr/WebKit #138

0.10.0 → 1.4.0 Major PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 24 directories with 3 updates

GloWE3/WebKit-4-Rainbowbeast #99

0.6.33 → 1.4.0 Major PR

Open 3 months ago 2 comments

Bump the npm_and_yarn group across 24 directories with 4 updates

GloWE3/WebKit-4-Rainbowbeast #97

0.6.33 → 1.4.0 Major PR

Open 3 months ago 3 comments

Bump node-forge and react-scripts in /PerformanceTests/Speedometer/resources/todomvc/architecture-examples/react-redux

Squarespace/WebKit #107

0.6.33 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 28 directories with 2 updates

D474designs/eattheblocks #140

0.7.5 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 5 directories with 4 updates

simnalamburt/appimage.github.io #86

0.7.1 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts in /pact/pact-react-consumer

gengle/code-examples #214

0.7.5 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump node-forge from 0.7.5 to 1.4.0 in the npm_and_yarn group across 1 directory

sumonst21/spark-wallet #5

0.7.5 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 4 directories with 2 updates

DaviCahet/portmaster-ui-local #8

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump node-forge and @vue/cli-service

thangved/code-notes #66

0.9.0 → 1.4.0 Major PR

Open 3 months ago 1 comment

Bump the npm_and_yarn group across 12 directories with 3 updates

dopsonbr/microsoft-authentication-library-for-js #41

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts in /netflix-clone

valdir-ti/netflix-clone #36

0.9.0 → 1.4.0 Major PR

Open 3 months ago 1 comment

build(deps): bump the npm_and_yarn group across 8 directories with 5 updates

24601/graphql-engine #92

0.10.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Bump node-forge and react-scripts

ArunPrasad017/apa-docker-react #27

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump node-forge and react-scripts in /solidity-v1/dashboard

threshold-network/keep-core #3914

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 2 comments

chore(deps): bump node-forge and react-scripts in /examples/storybook

BuilderIO/builder #4424

0.9.0 → 1.4.0 Major PR

Open 3 months ago 3 comments

Bump node-forge and react-scripts

theholla/pickathon #24

0.9.0 → 1.4.0 Major PR

Closed 3 months ago 1 comment

Package Details

Name:	`node-forge`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/node-forge`
JSON API:	View JSON

Security Advisories

15

Active advisories

HIGH 9

MODERATE 3

LOW 3

View All npm Advisories

Package Information

Description:

JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilities.

Repository:	https://github.com/digitalbazaar/forge
Homepage:	https://github.com/digitalbazaar/forge
Latest Release:	`1.3.1` about 4 years ago
Dependent Repos:	3,039,204
Dependent Packages:	2,329
Downloads:	99,242,131
Ranking:	Top 0.0058% by dependent repos Top 0.0211% by downloads Top 0.0344% by dependent pkgs

PR Status

Open 2,966 (52.0%)

Merged 58 (1.0%)

Closed 2,654 (46.5%)

PR Types

Major 1,166 (20.4%)

Minor 1,534 (26.9%)

Patch 2,926 (51.3%)

Removal 42 (0.7%)

node-forge

Security Advisories

Forge has signature forgery in RSA-PKCS due to ASN.1 extra field

node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization

Improper Verification of Cryptographic Signature in node-forge

Improper Verification of Cryptographic Signature in node-forge

node-forge has ASN.1 Unbounded Recursion

Recent PRs (filtered by: Major PRs )

Package Details

Security Advisories

15

Package Information

PR Status

PR Types

`node-forge`