Teire
Changes
Scan
Docs
Trust
← All changes
node-forge (npm) · Teire
Changes
Scan
Docs
Trust
Sign in
Worker running
node-forge
npm
latest
1.4.2
· 2026-10-27
www.npmjs.com · all 136 versions
Security advisories
7
node-forge: Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
fixed in 1.4.0
node-forge: node-forge has ASN.1 Unbounded Recursion
fixed in 1.3.2
node-forge: node-forge has an Interpretation Conflict vulnerability via its ASN.1 Validator Desynchronization
fixed in 1.3.2
node-forge: Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
fixed in 1.4.0
node-forge: node-forge is vulnerable to ASN.1 OID Integer Truncation
fixed in 1.3.2
node-forge: node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements
no fix yet
node-forge: Forge has signature forgery in Ed25519 due to missing S > L check
fixed in 1.4.0
Versions that change something
1.3.2
2025-11
fixes 3 advisories
1.4.0
2026-03
fixes 3 advisories